Cisco ISE also supports patch rollback from both CLI and GUI. However, note the following restriction:
To find the latest patches and cumulative updates, visit the Cisco ISE Software Download Page. You will typically need a valid Cisco service contract to download these files.
Used for virtual deployments on VMware ESXi or Microsoft Hyper-V. Updating Cisco ISE 2.7: Applying Patches