Easy question. The release notes for 3.3.3 say service pack 1 is supported, no mention of SP2. I've got two ACS servers that simply will not answer radius requests from a packet level and the logs show it never even heard them.
The only thing in common is they are both service pack 2. If I point devices to other radius servers all works well.
