The 3.11.xE release train introduced and stabilized several enterprise-grade networking features:
Simplifies the rollout of security policies using SGTs (Scalable Group Tags). cat4500e-universalk9.spa.03.11.05.e.152-7.e5.bin
show ip ssh
Often, moving to a newer IOS-XE version requires a minimum ROMMON (bootloader) version. Check the Cisco Release Notes for version 03.11.05.E to see if a ROMMON update is required. SGT (Security Group Tags)
– An audit requires disabling SSLv3/TLSv1.0 and enabling SSHv2 with stronger ciphers. The 15.2(7)E5 train supports ip ssh server algorithm encryption aes256-ctr and no ip http secure-server . and advanced IEEE 802.1X features.
Support for TrustSec, SGT (Security Group Tags), and advanced IEEE 802.1X features.