Cisco ISE 3.1 and 3.2 End of Life: Fixes Stop November 3, 2026
Cisco Identity Services Engine (ISE) 3.1 and 3.2 get their last software fixes on November 3, 2026. After that date Cisco Engineering stops developing, repairing and testing both versions, security fixes included. They are already on reduced maintenance: since November 3, 2025 Cisco publishes fixes for them only for critical security vulnerabilities and severity 1 issues. Support under a service contract runs to November 30, 2027. All of this is from Cisco's end-of-life bulletin for ISE 3.1 and 3.2.
Cisco's milestones, in plain words
| Milestone in the bulletin | Date | What it means |
|---|---|---|
| Software Maintenance | November 3, 2025 | From this date only critical security vulnerabilities and severity 1 issues are fixed |
| End of SW Maintenance Releases | November 3, 2026 | The last date Cisco Engineering may release maintenance releases or bug fixes, including for security vulnerabilities. Later vulnerabilities are fixed only in newer supported releases. Cisco's bulletin also gives this as the last day to order |
| Last Date of Support | November 30, 2027 | The last date to receive service and support under an active contract. After it the product is obsolete |
The gap between the last two dates is the part that catches people out. For the final year a support contract still gets you help from Cisco's assistance centre, but not a fix for a newly found flaw. The answer to a new vulnerability in that year is "upgrade".
ISE versions and where they stand
| Version | Reduced maintenance from | Last software fixes | Last date of support |
|---|---|---|---|
| ISE 3.5, 3.4, 3.3 | No end-of-life bulletin published by Cisco | ||
| ISE 3.2 | November 3, 2025 | November 3, 2026 | November 30, 2027 |
| ISE 3.1 | November 3, 2025 | November 3, 2026 | November 30, 2027 |
| ISE 3.0 | July 13, 2023 | July 13, 2024 | July 13, 2025 |
| ISE 2.7 | September 22, 2022 | September 22, 2023 | September 22, 2024 |
Cisco's notice listing for ISE, read on the day of publication, carries bulletins for 3.1 and 3.2, 3.0, 2.7 and older, and none for 3.3, 3.4 or 3.5. Column names follow the 3.1 and 3.2 bulletin; older bulletins use slightly different milestone names.
What to do
- On ISE 3.0 or older: past every date Cisco lists. Upgrade now.
- On ISE 3.1 or 3.2: you are in the critical-fixes-only year, and it ends on November 3, 2026. Plan the upgrade to a version with no end-of-life bulletin, and check Cisco's upgrade documentation for the supported path from your exact patch level.
- Check the appliance as well as the software. Cisco has a separate end-of-life notice for the SNS 3515 and 3595 servers; an old appliance can block the software upgrade.
- Do not read the 2027 date as the deadline. The last date of support is for contract help. The date that matters for security is the end of software maintenance releases.
Frequently Asked Questions
When is Cisco ISE 3.2 end of life?
Cisco's bulletin for ISE 3.1 and 3.2 sets the end of software maintenance releases at November 3, 2026: after that date Cisco Engineering stops developing, repairing and testing those versions, and security fixes come only through later releases. The last date of support under a service contract is November 30, 2027.
Is Cisco ISE 3.1 still getting security fixes?
Only critical ones. Since November 3, 2025 Cisco publishes fixes for ISE 3.1 and 3.2 only for critical security vulnerabilities and severity 1 issues, and that ends on November 3, 2026.
Which Cisco ISE versions have no end-of-life date?
ISE 3.3, 3.4 and 3.5. Cisco's end-of-sale and end-of-life notice listing for ISE carries bulletins for 3.0, 3.1 and 3.2 and older versions, and none for 3.3 or later.
Related
- Cisco ISE — every version, live status and EOL Risk Score
- Cisco ISE CVE-2026-76460: which versions are patched
- Cisco IOS XE end of life
- End-of-support edge devices