Release Notes for Cisco Catalyst Center, Release 3.1.6

2025-12-18

Initial release

_

Release build version

Release version

3.1.6-75205

System updates

System

3.1.283

System Commons

2.734.65386

System Addons

0.10.506

Package updates

Access Control Application

2.734.65386

AI Endpoint Analytics

3.160.26

AI Network Analytics

4.0.35

Application and Service Remediation

3.16.23

Application Hosting

2.4.225112005

Application Visibility and Policy

2.734.117614

Assurance

3.160.192

Assurance – Sensor

3.160.159

Automation - Intelligent Capture

2.734.65386

Automation – Sensor

2.734.65386

Catalyst Center API Catalog

6.8.515

Catalyst Center Gateway Service

0.10.509

Cisco Catalyst Center Global Search

6.9.4

Cisco Catalyst Center Platform

6.9.517

Cisco Catalyst Center UI

3.5.507

Cisco Identity Services Engine Bridge

3.160.38

Cloud Connectivity

6.10.505

Cloud Connectivity - Contextual Content

7.0.505

Cloud Connectivity – Digestor

7.0.503

Core Platform

0.10.549

Disaster Recovery

2.734.365017

Note: This package is available only for the on-premises hardware appliance, not for the virtual appliance.

DxHub Cloud Connectivity

6.10.516

Group Based Policy Analytics

3.160.114

Identity and Access Management

5.4.510

Identity and Access Management - UI

5.4.504

Multiple Cisco Catalyst Center

2.734.65386

Network Controller Platform

2.734.65386

Network Data Platform - Base Analytics

3.160.10127

Network Data Platform - Caching Infra

6.6.503

Network Data Platform – Core

6.6.504

Network Data Platform - Ingestion Infra

6.6.505

Network Data Platform - Manager

6.6.101

Network Data Platform - Pipeline Infra

6.6.505

Network Data Platform - Storage Management

6.6.503

Platform Refresh

1.4.40

RCA-Scripts Package

0.5.7

Rogue and aWIPS

3.1.411

SD Access

2.734.65386

Shared Managed Services

0.10.512

Stealthwatch Security Analytics

2.734.1095099

Support Services

2.734.885129

System Management Operations

1.6.511

Telemetry

4.7.502

Wide Area Bonjour

2.734.755017

Base functionality

Security service insertion for SD-Access

Catalyst Center supports security service insertion to enhance security for SD-Access fabric networks by steering the traffic through firewalls based on predefined policies.

Note: This feature is in beta.

SNMPv3 authentication support for SHA256

Catalyst Center now supports SHA256 as an SNMPv3 authentication type.

The use of SHA256 provides a stronger authentication mechanism compared to older algorithms, enhancing the security of SNMP communication with Catalyst Center.

Support for campus networks

The Campus Network feature in Catalyst Center enables you to manage devices across multiple sites using networks and device groups. You can compare device configurations and learn or create group profiles within your network.

Note: This feature is in beta.

Traffic steering policy configuration

Catalyst Center supports the configuration of traffic steering policies to redirect the required traffic to the firewall. You can use the traffic steering policies for security service insertion.

Note: This feature is in beta.

Ease of use

View details of all rogue APs on a floor

You can view the precise location of all rogue APs and their threat levels on a floor map.

Base functionality

API Operations

The Catalyst Center platform supports new API operations.

For more information, see “New and changed information” in the Cisco Catalyst Center Platform User Guide.

For detailed information about the API operations, see the Cisco Catalyst Center APIs on Cisco DevNet.

Assurance Event

The Catalyst Center platform supports a new Assurance event called NETWORK-FABRIC_WIRED-1-338, which triggers when firewall connectivity goes down from a fabric edge node for a specific VRF and firewall IP.

This firewall IP reachability issue monitors the availability of a route from edge nodes to the firewall in fabric sites with service insertion enabled. One issue is generated for each unique edge node, firewall IP, and VRF combination.

Ease of use

Client Report

The Catalyst Center platform supports a new Client report template called Client Roam Events.

Use this template to generate a report on devices that frequently (within 10 minutes) switch between adjacent access points (APs) despite being stationary.

For more information, see “New and changed information” in the Cisco Catalyst Center Platform User Guide.

Base functionality

AP Locally Significant Certificate (LSC) renewal for wireless devices

Catalyst Center enables you to create AP LSC renewal profiles and renew the AP LSCs for wireless devices before its expiry.

Note: The device must be running Cisco IOS XE Release 17.1.7.1 or later.

In the Provision > Inventory window, the Certificate Expiration and Certificate Type columns are added to the Devices table for easier access to certificate information.

Enhancements to 802.11be profiles

For Cisco IOS XE Release 17.18.1, the 802.11be profiles have these enhancements:

In the Design > Network Settings > 802.11be Profiles window, the table has these enhancements:

Enhancements to Per-Device Configurations for Cisco Catalyst 9800 Series Wireless Controllers

The Per-Device Configuration feature on Catalyst Center now supports these configurations and parameters for a Cisco Catalyst 9800 Series Wireless Controller running Cisco IOS XE Release 17.18.1 or later:

Support for Cisco Wireless 9171I Series Access Points

Catalyst Center supports the Cisco Wireless 9171I Series Access Points for Wi-Fi 7 configuration with Cisco IOS XE Release 17.18 or later.

This AP supports dual-band (XOR) capability allowing slot 1 to operate in either 5-GHz or 6-GHz radio modes.

Note: When configuring this AP using the Configure Access Points workflow, you can't configure the radio parameters for slot 1 in the Configure 5 GHz Radio Parameters or Configure 6 GHz Radio Parameters windows. Instead, use the Configure Dual-Band (XOR) Radio Parameters window to manage these settings.

Base functionality

Support for Cisco C9350 Series Smart Switches as fabric edge device

Catalyst Center supports Cisco C9350 Series Smart Switches as edge devices within a fabric network.

Note: Cisco C9350 Series Smart Switches do not support wireless capability or the configuration of extended nodes.

Catalyst Center integration with CMX 11.0 and TLS 1.3

Starting with CMX 11.0, TLS 1.2 is no longer supported by default; only TLS 1.3 is supported. Catalyst Center 3.1.6 supports FIPS 140-3, TLS 1.3, and the corresponding cipher suites required by CMX 11.0. If you enable Common Criteria and lock the TLS version to TLS 1.2, integration with CMX 11.0 or later may fail.

Older CMX versions, such as 10.6.x, support TLS 1.2 and do not present integration issues. From CMX 11.1.0 and later, new configuration options are available to re-enable TLS 1.2 support.

For details, see the Cisco CMX 11.1 Release Notes and the Cisco CMX 11.1 Command Reference.

Minimum periodic resync interval increases to 6 hours

The minimum periodic resync interval (both per device and global) has been increased from 25 minutes to 6 hours to improve performance and optimize resource allocation.

Mobility configuration option removed from Per-Device Configuration for a Cisco Catalyst 9800 Series Wireless Controller

In the left pane of the device details window for a Cisco Catalyst 9800 Series Wireless Controller with Per-Device Configuration enabled, the Mobility option under Global Wireless Configurations and these tabs are removed:

OFDMA uplink, OFDMA downlink, MU-MIMO uplink, and MU-MIMO downlink configuration changes for 802.11be settings

Starting with Cisco IOS XE Release 17.18.2, the OFDMA Uplink, OFDMA Downlink, MU-MIMO Uplink, and MU-MIMO Downlink parameters are deprecated and ignored in these 802.11be configurations:

To configure these settings:

Support for Cisco Umbrella 

Catalyst Center deprecates and discontinues support for Umbrella. Data collected for Umbrella will be permanently deleted from Catalyst Center.

CSCwr86684

If the configuration ip ssh server algorithm hostkey ecdsa-sha2-nistp256 is used without the configuration crypto key generate ec keysize 256 label ecdsa-key, the device accepts the hostkey ecdsa-sha2-nistp256 configuration but doesn’t serve the ECDSA algorithm as configured.

Guidelines

APs

A wireless controller configuration change triggers only a wireless controller synchronization. During this synchronization, Catalyst Center:

To view updated information for APs associated with the wireless controller (like AP status, new AP discovery, AP configuration, and so on), you must manually perform a full wireless controller synchronization. For a full synchronization, complete these steps:

Step 1. On the Inventory window, select the wireless controller.

Step 2. Choose Actions > Inventory > Resync Device.

Stealthwatch Security Analytics

If you are upgrading from Release 2.3.7.x to 3.1.x, you must have Write permissions for Stealthwatch to provision Stealthwatch Security Analytics on a device. With only Read permissions, you can’t edit or provision the configurations. Update the permissions before or after the upgrade to enable editing and provisioning the configurations.

Limitations

AP Locally Significant Certificate (LSC) renewal for wireless devices

When you renew the AP LSC certificate in the Catalyst Center inventory, the AP certificate status shows as Started on the Renew Access Point Certificate window even after successful certificate renewal. This issue is a display issue only and the AP certificates are renewed correctly. To verify successful renewal, check the certificate expiry time, which reflects the updated value.

Per-Device Configurations

In-product help

Upgrade

In-Service Software Upgrade (ISSU) is not supported in Cisco SD-Access deployments, with this exception:

Catalyst IE3200, IE3300, and IE3400 switches are classified as low-flash memory devices. Although Catalyst Center typically recommends using install mode for SWIM upgrades, this method may fail on Catalyst IE switches when upgrading from Cisco IOS XE Release 17.x to 17.12.x. Therefore, for SWIM upgrades in install mode, we recommend upgrading the switch to Release 17.15.x or later. If you are using bundle mode, you can upgrade the switch to Release 17.12.x.

Upgrade

ISSU is not supported on the Cisco C9610 Smart Switch when upgrading from Cisco IOS XE Release 17.18.1 to 17.18.2. Although Catalyst Center typically recommends using install mode for SWIM upgrades, SWIM will continue to function, but ISSU will not work due to compatibility limitations specific to Cisco C9610 Smart Switches when upgrading from 17.18.1 to 17.18.2.

1.2.4: Captions (Live)

Not Supported

—

1.2.5: Audio Description (Prerecorded)

Not Supported

—

1.3.4: Orientation

Not Supported

—

1.3.5: Identify Input Purpose

Supported

—

1.4.3: Contrast (Minimum)

Supported

—

1.4.4: Resize Text

Supported

—

1.4.5: Images of Text

Supported

—

1.4.10: Reflow

Supported

—

1.4.11: Non -Text Contrast

Supported

—

1.4.12: Text Spacing

Supported

—

1.4.13: Content on Hover or Focus

Supported

—

2.4.5: Multiple Ways

Supported

—

2.4.6: Headings and Labels

Supported

—

2.4.11: Focus Appearance (Minimum)

Supported

—

2.5.7: Dragging Movements

Partially Supported

Dashboard partially supports drag and drop due to third-party library limitations.

2.5.8: Target Size (Minimum)

Supported

—

3.1.2: Language of Parts

Supported

—

3.2.3: Consistent Navigation

Supported

—

3.2.4: Consistent Identification

Supported

—

3.3.3: Error Suggestion

Supported

—

3.3.4: Error Prevention (Legal, Financial, Data)

Not Supported

—

3.1.2: Language of Parts

Supported

—

3.2.3: Consistent Navigation

Supported

—

3.2.4: Consistent Identification

Supported

—

3.3.3: Error Suggestion

Supported

—

3.3.4: Error Prevention (Legal, Financial, Data)

Not Supported

—