CSCwk70500

From Cisco ISE Release 3.2 and later, bond interfaces need MTU as configured on primary interfaces.

CSCwj57697

There is a data mismatch when opening live logs or live session details in Cisco ISE.

CSCwk98467

Data upgrade or restore fails from Cisco ISE Release 3.3 to Cisco ISE Release 3.4 if REST ID store is configured without a suffix.

CSCwm12300

Unable to change the password policy on Cisco ISE under internal identity user authentication settings.

CSCwj97724

Cisco ISE should not allow updating the existing library conditions with conditions that are not allowed in the policy set.

CSCwk45395

When a previous mandatory policy fails, the audit policy fails and shows skipped conditions.

CSCwk80923

Cisco ISE CLI or SSH user does not follow password policy.

CSCwk93711

Cybervision receives DDOS getAssets calls post Cisco ISE integration.

CSCwj77930

pxGrid JMESPath filter bulk download client timeout.

CSCwm05976

RPC calls made through Active Directory probe for ODBC authentications.

CSCwm00336

Domain name does not update in the system file (etc/hosts) when bond is configured.

CSCwk24032

Not all Cisco ISE SRV records have IP due to UDP size limit (length = 548).

CSCwk71111

Backup restoration is stuck at 75 percent.

CSCwm36268

In Cisco ISE Release 3.3 Patch 2, Endpoint incorrectly shows as a "Rejected Endpoint" after it is released.

CSCwm48867

The swapon or swapoff cron should be removed as it causes high load every 6 hours.

CSCwk25206

Empty GPG files are exported if there is no data to purge.

CSCwm35851

If PAN failover is enabled in deployment page, PAN-HA precheck fails.

CSCwm10693

Cisco ISE internal users account disable policy feature does not work after one day of inactivity.

CSCwm38826

Cisco ISE Release 3.4 incorrectly marks RADIUS packets as duplicates.

CSCwm72206

In Cisco ISE Release 3.3 Patch 3, the external identity sources show "no data available" after Cisco ISE Release 3.3 Patch 3 installation.

CSCwm59777

IP domain-name validation is too strict and does not accept valid domains.

CSCwj44649

In Cisco ISE Release 3.3, TACACS data is not retained and everything gets purged.

CSCwj82240

In Cisco ISE Release 3.2, Cisco ISE counters reports are empty for secondary nodes.

CSCwk79595

Page-level help for inbound and outbound SGT Domain Rules page does not work.

CSCwk74103

Cisco ISE EAP-FAST PAC-less session timeout, value does not get saved.

CSCwk07454

In Cisco ISE Release 3.2 Patch 6, PSN does not update the database with the correct posture lease expiry time.

CSCwk46855

Users pending account is not displayed in the Sponsor Manage Account page.

CSCwk15719

Cisco ISE profiler is unable to read the MAC from the LLDP port ID subtype 7 received through SNMP probe response.

CSCwi01581

SXP binding is stuck on Cisco ISE during re-authentication of endpoint between multiple VNs.

CSCwk87768

Authentication using the name of the profile fails when the default device is used.

CSCwk63923

DNS cache timeout is not honored.

CSCwm33110

Heap space is fully utilized by RMQ Consumer.

CSCwk67197

Cisco ISE does not connect with external RADUIS server when proxy-state attribute is missing.

CSCwm13930

Agentless posture and endpoint logs are exported as HTM instead of a zip file.

CSCwm43231

Custom portal files previews do not load properly.

CSCwk31930

Cisco ISE skips authentication against the child domain controller when the AD Forest is marked offline.

CSCwk97231

The backup file is not displayed in the GUI.

CSCwm00197

Numeric overflow exception encountered during restart of replication client.

CSCwk88239

MDM significant attributes causes database persistent events during authentication flow.

CSCwk35573

Vulnerable JS Library issue found while executing ZAP in Cisco ISE Release 3.3.

CSCwk76790

When you try to edit or add a description for network access users, the description field closes.

CSCwm63628

All rules of source and destination tree under TrustSec policy in Cisco ISE GUI are not visible.

CSCwk91347

Allow enabling of PAP when FIPS is enabled for RADIUS DTLS compatibility.

CSCwk38205

SGTs are not deleted when an ACI connection is deleted.

CSCwk55333

The ise.psc.log does not print the incoming API request's URI in DEBUG mode.

CSCwm29900

Imported endpoints show incorrect endpoint IDs causing data mismatch.

CSCwk74068

SXP bulk download missing entries after SXP node reload.

CSCwm50409

Slow ERS API endpoint call.

CSCwk33597

TACACS authorization details do not work when SMNT is on the same node as primary PAN.

CSCwk32078

Endpoint check result remains unreachable after passive ID login event.

CSCwh39213

Unable to replace SSH key for Cisco ISE AWS EC2 instances.

CSCwk25839

Getting higher counts external active directory logs on syslog server.

CSCvy74903

IP address 169.254.4.3 seen when using certificate-based authentication for Cisco ISE administration.

CSCwk64227

ODBC query in authorization policy does not return result with Postgres.

CSCwk38245

In Cisco ISE Release 3.2, Cisco ISE_Internal_Operations_Diagnostics triggers FATAL logging message stating system has reached low disk space limit due to localstore directory size issue.

CSCwm37824

Proposed profiled rule download button throws 400 error.

CSCwk59176

The graph is not shown when you click on Cisco ISE report in launchpad from prime infrastructure.

CSCwm60583

While enabling or disabling IPv6, multiple empty lines are created in sysctl.conf file.

CSCwm58686

Passive session is not published to FMC as Cisco ISE tries to stitch session always.

CSCwm40047

Getting misleading error prompt "Unable to send email".

CSCwj35698

Cisco ISE Business Logic Issue - User Dictionaries.

CSCwk80338

In CDP, multiple SGT IP bindings are missing from Cisco ACI to Cisco ISE; Cisco ACI has mdpEps.

CSCwm02519

Additional fix to LSD class.

CSCwk40233

Posture state synchronization feature use cases and validation steps need to be documented.

CSCwk21895

Cisco ISE says CLI maximum password size is 127.

CSCwm53627

Optimize the indexing for 'EDF_MDM_GUID' lookups for 'EDF_MDM_GUID' to eliminate full table scans.

CSCwk75761

High CPU on admin node post accessing "Endpoint Identity Groups" page on Cisco ISE.

CSCwj29473

Cisco ISE Formula Injection.

CSCwm47768

Cisco ISE portals show Ukrainian when browser language is Russian.

CSCwm46079

SXP mappings is not learned for VPN users private IP.

CSCwk56154

RBAC admin user able to add user without static assignment group.

CSCwm36039

Cisco ISE Release 3.4 GuestAPI query fails with an admin account who has sponsor privileges.

CSCwm63134

In Cisco ISE Release 3.2 Patch 6, Cisco ISE does not query MDM intermittently if it receives a 404 response from the MDM server.

CSCwm44513

PIV/CAC authentication for Cisco ISE admin access causes System 360 permission issues.

CSCwm53456

In Cisco ISE Release 3.3 Patch 2, error occurs when certificate details are retrieved.

CSCwj77501

ODBC advanced attributes does not work if two or more inbound attributes are selected.

CSCwe54931

System 360 does not show Cisco ISE nodes with different DNS domain names other than primary Cisco ISE.

CSCwm67805

Due to CoA reauth getting stuck, BYOD devices are on WebAuth pending state even when devices are registered.

CSCwk75775

The health check fails on input or output bandwidth performance check and returns a NULL result.

CSCwk91976

The GUI does not ask confirmation of old password for password change.

CSCwm03837

Cisco ISE Release 3.2 Patch 6 health check input or output bandwidth fails even when it is within the supported guidelines.

CSCwk73315

Cisco ISE 360 Monitoring dashboard displays average CPU time percentage instead of summing the rate.

CSCwk53171

Cisco ISE /ers/config/endpoint/getrejectedendpoints does not have pagination and returns only 100 endpoints.

CSCwm00497

Cisco ISE passiveid-agent.log should include information about the user when logon event is shared.

CSCwm30212

The pxGrid direct triggers sync at last restart time instead of scheduled time.

CSCwk34825

Cisco ISE internal user lock or suspend on incorrect attempts counter does not work as expected.

CSCwk69424

ODBC advanced setting sent in procedure call should be logged.

CSCwj57668

Post upgrade MFC profiler dashboard shows no data.

CSCwk29799

List of installed patches does not show under patch management page due to admin certificate issue.

CSCwj35581

Cisco ISE missing rate limiting protection.

CSCwk40725

ConfD generates endless localhost:9888.access.1.1.1.1... and so on.

CSCwk45006

Device admin license does not allow Cisco ISE admin user to reset first login password.

CSCwk38327

Health check fails for MDM flow.

CSCwm13073

With less than 3000 SGTs, Cisco ISE throws "This Custom View has exceeded the maximum number of SGTs (3000)." error.

CSCwk61938

Cisco ISE Evaluate OpenSSH CVE-2024-6387 "regreSSHion".

CSCwk66013

Change in local log settings does not trigger old files deletion.

CSCwd61906

Sysaux tablespace allocation should be done based on the profile of the node.

CSCwk69537

Cisco ISE Release 3.2 API does not validate if a join point is being used when deleting it over the ERS API.

CSCwm61668

TC-NAC_Tenable throws "Scan Failed: Error in connecting to host: 403 Forbidden" error.

CSCwk36095

The pxGrid live log serviceability.

CSCwk33023

Update pi-profiler prometheus configuration without app server restart.

CSCwk73305

Blanket bug to commit Cisco ISE XDR integration changes.

CSCwk57231

Blanket bug to add multi-ACI report for CDP.

CSCwk47423

Cisco ISE Reflected Cross-Site Scripting Vulnerability.

CSCwk47454

Cisco ISE Reflected Cross-Site Scripting Vulnerability.

CSCwk47465

Cisco ISE XML External Entity Injection Vulnerability.

CSCwk47475

Cisco ISE Arbitrary File Read and Delete Vulnerability.

CSCwk47489

Cisco ISE Arbitrary File Read and Delete Vulnerability.

CSCwk59325

Cisco ISE services are getting initialized due to dangling LOCK_FILE.

CSCwk59449

Cisco ISE redirection bypass may lead to XSS.

CSCwm07116

For SMS gateway GET requests, the URL mapping is not visible in the guest.log.

CSCwm31590

FMC integration with Cisco ISE Release 3.3 Patch 3 is breaking for Azure sessions.

CSCwm34442

Cisco ISE Release 3.4 Active Directory diagnostic tool tests are failing.

CSCwn07737

In CDP or CSDAC, bindings to SXP devices are no longer sent after workload classification rule changes.

CSCwn18814

In CDP, IPv6 traffic loss to the data center occurs after a PSN reload or an SXP move.

CSCwn21297

The installation time extension has impacted the CI.

CSCwn21374

In Cisco ISE Release 3.3, a delay occurs when logging into the PAN while it is in not-in-sync mode, as it does not respond on TCP port 443.

CSCwn34778

Despite having MDM attributes, the authentication session does not align with the MDM policy.

CSCvy74903

IP address 169.254.4.3 is seen when using certificate-based authentication for Cisco ISE administration.

CSCwm58017

Cisco ISE Release 3.4 port 80 is not in the listening state.

CSCwm65529

Static identity group cannot be changed for endpoints.

CSCwi89720

Microsoft Azure AD has been officially renamed as Microsoft Entra ID.

CSCwf80509

The aging time of Cisco ISE Passive ID is always 1 hour regardless of the configuration.

CSCwf32641

Cisco ISE Release 3.3: The automatically generated SNMPv3 engine ID is identical on all the nodes. The ID displayed is AKHGCM5MKGF.

CSCwi59868

Account extension is not properly defined in the Sponsor-based Guest Portal.

CSCwh81035

The Cisco ISE PAN is missing updates of nonsignificant attributes for endpoints from the Cisco ISE PSN.

CSCwh89520

Cisco ISE CLI upgrade fails with the error "Internal error during command execution".

CSCwj42214

Syslogs for Cisco ISE MnT purge events are incorrectly formatted.

CSCwi59216

The Sponsor Portal displays the error "400 Bad Request" when you click the Contact Support option on the Cisco ISE GUI.

CSCwi18917

Cisco ISE SNMP polling doesn’t work with privacy protocol AES 192 or AES 256.

CSCwf16588

Adding the second NTP authentication key removes all authentication keys from the Cisco ISE GUI.

CSCwh84446

If the Account Expiration notification has special characters, you can’t save the Guest Type.

CSCwb63834

The MnT log processor service occasionally runs on other Cisco ISE admin nodes.

CSCwe95624

In Cisco ISE Release 3.2, SNMP doesn’t work after a node restart.

CSCwi58421

When posture lease is enabled, Cisco ISE PSN doesn’t update the database with the correct posture expiry time.

CSCwe74135

Guest portal removal failure and integrity constraint in Cisco ISE Release 3.1 Patch 5.

CSCwd28431

Removal of EPS from Cisco ISE code.

CSCwj60692

TLS is restricted to use only a few ciphers in Cisco ISE Release 3.3, but the ports 8905, 9094, and 9095 use all TLS ciphers.

CSCwi67503

Cisco ISE couldn’t find the selected authorization profile if the profile has been created using API.

CSCwi57950

Strict transport security is incorrectly formed in Cisco ISE Release 3.2.

CSCwh95587

NFS repository stops working suddenly on a single node in a distributed deployment in Cisco ISE Release 3.2.

CSCwi57812

Listening noted on port TCP and 67 in Cisco ISE Release 3.2.

CSCwf72037

Administrator login report displays the error "Administrator authentication failed" every five minutes in Cisco ISE Release 3.1.

CSCwj48359

The pxGrid Databases Synchronization Test on Cisco ISE displays the error "Out of Sync".

CSCwh47601

Unable to create a user with auth-password and priv-password equal to 40 characters in Cisco ISE Release 3.2 Patches 2 and 3.

CSCwj04049

When using an LDAP connection to connect to AD, Cisco ISE can’t translate the value of AD attribute "msRASSavedFramedIPAddress" or "msRADIUSFramedIPAddress".

CSCwc64144

The attributes TotalAuthenLatency and ClientLatency don’t work for TACACS+ in Cisco ISE.

CSCwe10898

Unable to add an endpoint's MAC address to Endpoint Identity Group when using grace access in the Guest portal.

CSCwi15914

Additional IPV6-SGT session binding created for IPV6 to link local address from SXP ADD operation.

CSCwf10516

The authorization policy feature isn’t working in Cisco ISE Release 3.2.

CSCwf88944

Guest portal FQDN is mapped with the IP address of the node in the database.

CSCwh83482

Cisco ISE database doesn’t update the email field for Sponsor accounts.

CSCwf80292

Cisco ISE can’t retrieve a peer certificate during EAP-TLS authentication.

CSCvo60450

Enhancement for encryption to only send AES256 for MS-RPC calls.

CSCwf10773

Cisco ISE restarts services directly without a prompt with the error "no ip name-server" displayed.

CSCvw81130

Unable to disable Active Directory Diagnostic Tool scheduled tests in Cisco ISE Release 2.7.

CSCwj84815

The error "No session available" is displayed in Cisco ISE Release 3.3 Patch 2.

CSCvv90394

Unable to match "identityaccessrestricted equals true" in the authorization policy in Cisco ISE Release 2.6 Patch 7.

CSCwj14217

The Device Network Conditions GUI page doesn’t load.

CSCwi61700

The "iselocalstore" logs aren’t getting collected in the support bundle logs obtained from the Cisco ISE CLI.

CSCwh23986

The pxGrid getUserGroups API request returns an empty response.

CSCwk25064

Enabling the SXP role on the Cisco ISE PSN causes high CPU load and utilization.

CSCwj06401

Endpoints having a null key value pair in the attributes section are interrupting the purge flow.

CSCwh61339

Cisco ISE times out when using the Export All option on the Network Devices page to export more than 90,000 network devices.

CSCwf47838

Space " " characters in the command arguments are being replaced by forward slash "/" characters after the command set is exported as a CSV file.

CSCwi60778

The endpoint is losing the static identity group assignment after reauthentication.

CSCwj91517

You need to disable the unbound-anchor while starting Cisco ISE.

CSCwi18005

The external RADIUS server list doesn’t show up after upgrading to Cisco ISE Release 3.2.

CSCwh24754

An excess number of AD groups being mapped to sponsor groups is causing latency in sponsor login

CSCwh70275

During the registration of a node that was previously registered to the deployment, it’s observed that all the certificates of the deployment were deleted and that all the nodes in the deployment were restarted.

CSCwi05445

Unable to delete a support bundle from the Cisco ISE GUI in Cisco ISE Release 3.1 Patch 7.

CSCwk14636

An issue with the Insufficient Virtual Machine Resources Alarm on AWS is seen in Cisco ISE Release 3.2 Patch 6.

CSCwi59555

In Cisco ISE Release 3.2 Patch 4, the search for MAC address in the format is ignored.

CSCwd49321

When Cisco ISE has pxGrid enabled on two nodes, the integration fails with the error "pxGrid not enabled on ISE".

CSCwk32677

The ise-duo.log isn’t collected at the time of support bundle creation.

CSCwf26951

Profiler CoA sent with the wrong session ID.

CSCwi38644

The agent rule defaults to the default rule setting while editing an existing agent.

CSCwh38464

Cisco ISE CLI admin user is unable login after not logging in over a two-month period.

CSCwf35760

The ct_engine root is using 100% of the CPU.

CSCwi37079

Cisco ISE URT bundle upgrade fails with the error "RADIUS dictionary attribute duplicate entry exists".

CSCwi54325

The PRA fails if the endpoint is in a posture lease.

CSCwi03961

Location group information is missing from policy sets.

CSCwh71157

The mobile number format field for JavaScript code doesn’t support more than 100 characters.

CSCwd36753

The AnyConnect posture script isn’t attempted when the script condition name contains a period.

CSCwi29623

Scheduled backup configuration details aren’t visible to Read-only user in Cisco ISE Release 3.1 Patch 7.

CSCwf36285

The row of "Manage SXP Domain filters" only displays a maximum of 25 filters.

CSCwi48806

Unable to load the authorization policy due to duplicate portal entries.

CSCwj09890

When upgrading to Cisco ISE Release 3.4, the Duo seeder is missing in the MnT table post the upgrade.

CSCwj43912

The application remediation disappears after editing.

CSCwh83323

In Cisco ISE Release 3.2, the SMS is not sent during the "Reset Password" flow when using a custom "SMTP API Destination Address".

CSCwf92635

In Cisco ISE Release 3.3, the PAN failover component is missing from the debug log configuration.

CSCwa15336

In Cisco ISE PIC Release 3.1, the live session shouldn’t show the terminated sessions.

CSCwi04514

Posture client provisioning resources display an HTTP error when the dictionary attribute contains "-".

CSCwi61950

Cisco ISE is reaching the context limit in proxy flows when querying LDAP groups for authorization policies.

CSCwh60726

Cisco ISE automatic crash decoder isn’t decoding functions properly.

CSCwh69267

Post ADEOS restore, the app server is stuck at the initializing phase.

CSCwh16289

Add an option to delete temporary files from "/opt/backup" if the CLI backup process fails during transfer.

CSCwj89479

When joining multiple Cisco ISE nodes to the domain controller simultaneously duplicate accounts are created.

CSCwf31477

profiler is triggering Port Bounce when there are multiple sessions exist on a switch port

CSCwh69466

In Cisco ISE Release 3.1, the detailed report doesn't show both user and machine authentication policies for EAP chaining.

CSCwk13212

In Cisco ISE Release 3.2 and later releases, the System 360 monitoring debug log level needs to be reduced.

CSCwf55641

German and Italian emails can’t be saved under Account Expiration Notification in Guest Types.

CSCwi73984

In Cisco ISE Release 3.1Patch 8, the Installed Patches menu doesn’t list all the patches.

CSCwi73981

An identity store added using uppercase FQDN can’t be removed from the CLI.

CSCwf03445

In Cisco ISE Release 3.1, there’s an intermittent failure in displaying Live Log details and the error "No Data available for this record" is displayed.

CSCwf66781

Bulk Creating Egress Matrix Policy Via ERS Fails With an Error

CSCwf42496

An attempt to delete an "Is IPSEC Device" NDG causes all subsequent RADIUS and TACACS+ authentications to fail.

CSCwi17694

If the configured synflood-limit is beyond 10000, the limit isn’t working.

CSCwh90691

Show CLI commands throw an exception after configuring log level up to five.

CSCwh74135

Unable to integrate to prime Infrastructure due to a wrong password error.

CSCwi89689

Cisco ISE displaying "Invalid IP or hostname" error.

CSCwi46648

The PRA fails if the endpoint is within posture lease.

CSCwi45131

Apache Struts Vulnerability affecting Cisco products: December 2023

CSCwh39008

Not able to schedule or edit schedule for a configuration backup.

CSCwf32255

Cisco ISE Release 3.2 Patch 2 provides no response from SNMP when the "snmp-server host" is configured.

CSCwj01310

Intensive GC observed due to the SXP component causing node longevity issues in Cisco ISE Release 3.4.

CSCwh51136

Cisco ISE drops a RADIUS request with the error message "Request from a nonwireless device was dropped".

CSCwj77067

Provide a comprehensible description for the error displays while editing internal users.

CSCwf59310

Context Visibility for pxGrid ContextIn is missing custom attributes in Cisco ISE Release 3.1 Patch 7.

CSCwh25160

Swap memory usage is high.

CSCwh64195

Data corruptions causing FailureReason=11007 or FailureReason=15022 in Cisco ISE.

CSCwf23271

The deployment SEC_TRNREP_STATUS isn’t getting updated from the "In Progress" state.

CSCwf22527

In the Context Visibility page, the Endpoint Custom Attributes can’t be filtered using special characters.

CSCwh71273

In Cisco ISE Release 3.2, there’s limited GUI access and an inability to regenerate root CA when Essentials licenses are disabled.

CSCwh06338

The Cisco ISE GUI doesn't load when trying to edit the Client Provisioning Portal configuration.

CSCwi57761

CVE-2023-48795 seen in OpenSSH in Cisco ISE.

CSCwf27484

Unable to match Azure AD group if the user belongs to more than 99 groups.

CSCwj83460

Discrepancy in the count of identity groups between the CV and Oracle databases.

CSCwh71117

Enabling only "User Services" also enables admin GUI access.

CSCwi61491

The application server is crashing as a result of Metaspace exhaustion.

CSCwh77574

Cisco ISE doesn’t allow special characters in passwords while importing certificates.

CSCwf22794

Inconsistence on VLAN ID or name with the error "Error: Not a valid ODBC dictionary".

CSCwh69045

In Cisco ISE Release 3.1 Patch 5, the passwords of a few internal users aren’t expiring even after the configured global password expiry date.

CSCwj44649

In Cisco ISE Release 3.3, TACACS data isn’t retained and is purged.

CSCwh47299

The Cisco ISE Alarm and Dashboard Summary doesn’t load.

CSCwi10922

The message description for message code 13036 has a misspelled word.

CSCwk30610

In Cisco ISE Release 3.2, the TACACS+ end-station network condition has high step latency while accessing the NAD using the console.

CSCwa32407

Resend the user account details for all guest users or specific guest users to the sponsor.

CSCwh36544

pxGrid doesn’t show topic registration details.

CSCwi69659

During the TrustSec deployment verification, the policy difference alarm is triggered while policy the is identical on Cisco ISE and the NAD.

CSCwe12974

The text of the Out of Compliance for 30 days alarm needs to be updated.

CSCwh97876

Cisco Identity Services Engine Arbitrary File Upload Vulnerability.

CSCwd57628

In Cisco ISE Release 3.1, the NAD RADIUS shared secret key is incorrect when it starts with ' (apostrophe).

CSCwh70696

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability.

CSCwj21203

1000 database connections are exhausted due to "Dashboard System Status" query.

CSCwh05599

Cisco ISE Sponsor Portal is showing an invalid input when special characters are used in the Guest Type.

CSCwj39533

High CPU usage caused by RMQforwarder.

CSCwj60125

The User Account search and Manage Accounts functionality has been enhanced.

CSCwf89224

Decryption of session tickets received from the client fails on Cisco ISE.

CSCwi43166

TrustSec update with CoA or CoA-push is broken.

CSCwf36985

AD group retrieval fails while evaluating authorization policies.

CSCwi79159

Cisco ISE Release 3.2 Patch 4 displays a "deleteCertFromStore:- Failed to parse certificate" error.

CSCwk07483

The Profiler NetworkDeviceEventHandler failed to add a device as a result of the input containing "0-255" in the string.

CSCwj05508

The error "Name or service not known'" is displayed when you try to reach the configured IP host under certain procedures.

CSCwc39545

The Docker Metrics Report needs to be changed.

CSCwf31073

Cisco ISE displays a 400 error when fetching the device administration network conditions using OpenAPI.

CSCwi86762

Right COA to be triggered in VPM flow when posture and MDM flows are configured together.

CSCwj43362

An upgrade to Cisco ISE Release 3.2 fails with the error - integrity constraint (CEPM.REF_HOSTCONFIG_HA_PEER1) violated.

CSCwh28528

The TopN device administration reports don’t work when incoming TACACS records exceed 40 million records per day.

CSCwc85211

Cisco ISE Passive ID agent displays error "id to load is required for loading".

CSCwf51766

Cisco ISE can't create an authentication policy with DenyAccess identity source using OpenAPI.

CSCwj85626

Unable to retrieve the endpoint IP address using API calls.

CSCwi67639

The command "show cpu usage" doesn’t display information in Cisco ISE 3.x releases.

CSCwj35581

Cisco ISE Missing Rate Limiting Protection.

CSCwj05881

Authentication fails and the advanced options are ignored in Cisco ISE.

CSCwh14249

There’s a spelling mistake in API gateway settings in Cisco ISE 3.x releases.

CSCvz86688

Aruba-MPSK-Passphrase needs encryption support.

CSCwf09364

User and Endpoint Identity Groups description fields become not editable when using long-form text.

CSCwh10401

In Cisco ISE Release 3.1 Patch 5, the pxGrid client certificate can’t be generated by using CSR.

CSCwj12489

Unable to delete Network Device Group.

CSCwh04251

Cisco ISE agentless posture doesn’t support passwords containing ":" character.

CSCwk09094

A misleading pop-up seen while setting the password lifetime as more than 365 days.

CSCwf66237

Cisco ISE Get All Endpoints request takes a long time to execute since Cisco ISE Release 2.7.

CSCwk04644

In Cisco ISE Release 3.2 and later releases, System 360 Monitoring debug log rotation isn’t working.

CSCwi38377

Unable to trigger COA and is stuck at the dispatcher queue.

CSCwi92655

CSCwb18744

Security groups and contracts with multiple backslash characters in a row in the description can’t sync to Cisco ISE.

CSCwd67833

This Cisco ISE ERS API is taking several seconds to update a single endpoint.

CSCwj35602

The requirement to enter the current password during a password update can be bypassed in Cisco ISE.

CSCwf96294

Connection attempts to domains in the "not allowed domains" list are observed in Cisco ISE Release 3.0.

CSCwd14523

The 'accountEnabled' attribute is causing authentication issues for EAP-TLS with Azure AD.

CSCwd34467

In Cisco ISE, the authorization rule evaluation appears to be broken for authorization attempts that use EAP-chaining and Azure AD groups.

CSCwj80589

An error is displayed while launching the Log Analytics page.

CSCwf23981

Cisco ISE authorization profile displays the wrong security group and VN value.

CSCwh64394

After the Import button is clicked, the .csv file shouldn’t be selected and the Import button shouldn't work.

CSCvt75833

Cisco ISE should perform a NSLookup again when FQDN is the token server.

CSCwf64662

SXP creates inconsistent mapping between IP address and SGT.

CSCwj66951

The first name and last name fields in Network Access User doesn't allow for "'OR" in the names.

CSCwc53824

Cisco ISE limits connection to AMP - AMQP service to TLSv1.0.

CSCwf82055

Unable to disable SHA1 for ports associated with Passive ID agents.

CSCwh53159

Unable to change the admin password if it contains "$" in Cisco ISE Release 3.1 Patch 7.

CSCwi45090

The filter field 'name' isn’t supported for downloadable ACLs through Cisco ISE ERS APIs.

CSCwi59567

Issues seen when the COA retry count is updated to "0".

CSCwe82004

TCP socket exhaustion.

CSCwj82298

Assigned logical profile is repeated in the endpoint attributes and reports on the Context Visibility page.

CSCwh48978

Evaluation of Open VM tools CVE-2023-20900.

CSCwj83459

Unable to create a new internal user and the error "couldn’t execute statement; SQL [n/a]; constraint [CEPM.BKUPSLASTAUTHTIMEENTRY]" is displayed on the Cisco ISE GUI.

CSCwf71870

Evaluation of TACACS deployment with zero days won’t work following smart licensing registration.

CSCvy34255

Extra pop-up screen appears while viewing the RADIUS and TACACS key after enabling "Require Admin password" to view sensitive data.

CSCwi36040

IP access list control in Cisco ISE Release 3.2 isn’t visible.

CSCwj97449

The Cisco ISE admin isn’t alerted about incorrect engineID format in snmp-server host during SNMPv3 configuration.

CSCwh67500

Cisco ISE Release 3.2 couldn’t find selected authorization profiles.

CSCvs77939

Errors encountered while editing AnyConnect configurations and Posture agent profiles.

CSCwh88801

0.0.0.0 default static routes configured on all interfaces are deleted post Cisco ISE reload.

CSCwk07230

Duplicating network devices recreate the devices without RADIUS settings in Cisco ISE Release 3.3 Patch 2.

CSCwf72123

In pxGrid Direct, if the user data information is stored in nested objects within the data array, Cisco ISE is unable to them and it won’t be visible in the pxGrid Direct Connector information in the Context Visibility page.

CSCwi66105

Custom attribute failure seen in Cisco ISE Release 3.1 Patch 7.

CSCwh41693

Cisco ISE on AWS doesn't work if Metadata (IMDS) version value "V2 only" selected.

CSCwh05647

Static IPV6 routes are removed after a reload in Cisco ISE Release 3.2.

CSCwh96376

Cisco ISE Release 3.3 can’t switch the administration certificate role.

CSCwf34596

The user custom attributes are stuck in the rendering stage.

CSCwh38484

Manually deleting the static routes cause Cisco ISE to send packets with wrong MAC addresses in Cisco ISE Release 3.0 Patch 7.

CSCwj31619

In Cisco ISE Release 3.2 and later releases, conditions from Condition Studio has a default disabled icon in the information pop-up.

CSCwi52264

Cisco ISE SAML ID provider configuration attributes are deleted even when they are referenced elsewhere.

CSCwh00049

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability.

CSCwf59005

PEAP and EAP-TLS don't work on FIPS mode in Cisco ISE Release 3.2 Patch 3.

CSCwf80951

Can’t edit or create admin user due to the error "xwt.widget.repeater.DataRepeater".

CSCwh01022

IPv6 default route disappears from the routing table after modifying the IPv6 address.

CSCwj80950

Cisco ISE isn’t sharing posture-compliant session properly over pxGrid.

CSCwh30723

Cisco ISE context visibility doesn't validate static MAC entries if a separator like colon is omitted.

CSCwf38083

Cisco ISE services are stuck in the initializing state with secure syslogs.

CSCwi28131

Custom attributes used in the Never Purge rule are still purging the endpoints.

CSCwj12359

Interrupting execution of "show tech-support" causes services to stop on Cisco ISE.

CSCwj67980

Primary Guest Report shows duplicate entries of title when exported to an external repository.

CSCwi29253

Cisco ISE AD Diagnostic Tool stops working upon upgrade and you can’t retrieve the list of available tests.

CSCwh93925

CSCwh17386

Dedicated MnT nodes in Cisco ISE don’t replicate SMTP configuration.

CSCwe89459

The script provided for creating endpoint group in the Cisco ISE REST API document is incorrect.

CSCwf25955

Matching authorization profiles with SGT, VN name, and VLAN causes PRRT to crash.

CSCwh18487

Expired guest accounts don't receive SMS when they try to reactivate their accounts.

CSCwj82278

Stale lock files are blocking the API gateway and the Context Visibility page.

CSCwb77915

Toggle to enable or disable RSA PSS cipher based on policies under Allowed Protocols.

CSCwh52589

When a guest user connects for to Cisco ISE for the first time, Cisco ISE doesn’t update the ACS.Username field with the guest username.

CSCwh42442

CRL download failure seen in Cisco ISE Release 3.2 Patch 3.

CSCwi53915

The "Save" option under Advanced filters isn’t working for filtering Client Provisioning resources.

CSCwj68795

Replication error "Error synchronizing object: EDF2EndPoint: Operation: Update" is displayed during replication in Cisco ISE.

CSCwh93498

In Cisco ISE Release 3.1, the endpoints purging rule is automatically created after duplicating the My Devices portal in Cisco ISE BYOD configuration causing endpoints to be deleted from the Cisco ISE database after 30 days.

CSCwh90610

The abandoned Jedis connections aren’t being sent back to the thread pool in Cisco ISE.

CSCwf91508

Cisco ISE GUI packet captures that were taken from CLI can’t be deleted.

CSCwe07822

Cisco ISE date of last purge has the wrong time stamp.

CSCwh55667

Internal system error for posture is seen when premier license is disabled in Cisco ISE.

CSCvz48764

Allow Launch program remediation to have a set order.

CSCwi19460

Unsupported message codes 91092 and 91103, and respective alarms seen in syslogs.

CSCwj14231

Cisco ISE Release 3.2 custom filters for TACACS reports don't work as expected.

CSCwh06081

Deregistering a Cisco ISE node should verify whether the process has been initiated by the primary PAN.

CSCwi17200

When configuring "TROUBLESHOOTING.EncryptionOffPeriod" advanced tuning with any nonzero value of minutes for decrypting the communication with Active Directory for troubleshooting, then RPC net logon fails for all Active Directory authentications on that Cisco ISE node.

CSCuz65708

The numbering of DACL entries is off in Mozilla Firefox 45 and above.

CSCwh51548

Hotpatches aren’t getting installed when both patches and hotpatches are in ZTP configuration.

CSCwc26835

RADIUS server sequence configuration is corrupted.

CSCwi66608

In Cisco ISE Release 3.2, the RMQ is sending outgoing RST packets with APIPA IP 169.254.2.2.

CSCwj25817

Initial setup fails if the default gateway and configured IP address are on different subnets.

CSCwf39620

Windows Agentless Posture isn’t working if the username starts with $ (dollar sign).

CSCwh17448

In Cisco ISE Release 3.1, the Agentless Posture flows fail when the domain user is configured for endpoint login.

CSCvj75157

Cisco ISE API doesn't recognize identity groups while creating user accounts.

CSCvy30859

In Cisco ISE Release 2.6, it’s impossible to create static IP-SGT mapping for EPGs imported from ACI.

CSCwi42412

In Cisco ISE 3.x releases, Interactive Help throws an error in the console and logs.

CSCwh81943

The portal name and results filters aren’t working in the Primary Guest report.

CSCwh03740

CRL retrieval is failing.

CSCwj81776

Unable to use the advanced filter in Cisco ISE Release 3.2 for "Empty" and "Not Empty" filters.

CSCwj27469

Cisco ISE Release 3.3 on Cloud (Azure, AWS, OCI) isn’t reading disk size properly and always defaults to 300 GB.

CSCwh96018

Failure due to case-sensitive check when new mobile device managers are created with the same name but with a different case.

CSCwk07593

Get-All Guest User API isn’t retrieving all the guest accounts.

CSCwh99772

All network device groups are deleted after a child item is removed from any group.

CSCwf44906

After restoring a configuration backup, you must reconfigure the repository with new credentials.

CSCwj35576

Validation is missing on the Cisco ISE server.

CSCwi57903

No alarm is generated for a failed scheduled backup.

CSCwk07789

Invalid IP or hostname error is displayed when using "_" as the first character in the NSLookup request.

CSCwe12961

Evaluation Period Expired alarm is observed when the SLR license is out of compliance due to overconsumption.

CSCwj23933

The AD connector in not joined status update.

CSCwi11762

Korean support issue on Context Visibility page.

CSCwi59230

Only superadmin users can edit or delete endpoints when Cisco ISE has more than 1000 identity groups.

CSCwe15945

Guest accounts can’t be seen by sponsors in a specific sponsor group.

CSCwf34391

When the PassiveID syslog is received by the MnT before the Active Authentication syslog, session integration isn’t happening in Cisco ISE.

CSCwi57069

NA PRRT needs to be decoupled from logging using the main thread pool.

CSCwk13244

The ise-messaging.log not visible for download on the Cisco ISE GUI.

CSCwf14365

The warning "Configuration Missing" is seen when navigating to the Log Analytics page.

CSCwh24823

When nonmandatory attributes aren’t included in the body of Update PUT requests, their values are reset to empty or the default value.

CSCwi53884

Vulnerabilities in OpenSSL 1.0.2o.

CSCwe25050

Wild-card certificate imported on primary PAN isn’t replicated to other nodes in deployment.

CSCwc04447

Cisco ISE Release 2.7 Patch 6 is unable to filter NAD IP by IP address.

CSCwh30893

Profiling isn’t processing the Calling Station ID values that are in the format "XXXXXXXXXXXX".

CSCwi32576

PSN node crashed during assignment of CPMSessionID.

CSCwf40861

The Cisco ISE GUI is showing the HTML Hexadecimal code for the characters in the command set.

CSCwi11965

Cisco Identity Services Engine Server-Side Request Forgery Vulnerability.

CSCvu56500

Export of all network devices gives an empty file in Cisco ISE.

CSCwf59058

RBAC policy with custom permissions is working when the administration menu is hidden.

CSCwk32104

Both agentprobeoom.sh & restprobeoom.sh need to clean up their own OOM Heap files to optimize Cisco ISE database usage.

CSCwf85644

Cisco-av-pair throws an error when using % for PSK.

CSCwf66880

Endpoint .csv file import displays the error "No file chosen" after selecting the file.

CSCwa82035

Garbage collector logs, thread dump, and HEAP dump are missing from the support bundle.

CSCwh45472

Operational backups from the Cisco ISE GUI fail with the following status: "Backup Failed; copy to repository failed".

CSCwf40265

Cisco ISE maximum session counter time limit isn’t working.

CSCwj07319

The API ers/config/sessionservicenode is returning the incorrect total.

CSCwf83193

Unable to log in to the secondary admin node's Cisco ISE GUI using AD credentials.

CSCwk00439

pxGrid Direct service is stuck in the initializing state because the lock file isn’t removed.

CSCwf61939

Using an apostrophe in the First Name and Last name fields displays an invalid name error.

CSCwh18731

Upgrade to Cisco ISE Release 3.2 with LSD disabled before the upgrade workflow is causing a profiler exception.

CSCwh42009

In Cisco ISE Release 3.2 Patch 3, the adapter log information remains constant.

CSCwk20019

While using the SMS HTTP method as the SMS gateway the attribute name in the SMS HTTP URL causes problems.

CSCwk35172

The DumpClearOnExceed files are using excessive disk space on the Cisco ISE PSN nodes.

CSCwf62744

Addition of the "Disable EDR Internet Check" tag is a feature enhancement.

CSCwf44736

Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability.

CSCwh26698

Addition of a mechanism to fetch user data for pxGrid connectors.

CSCwb57672

The GCMP256 authorization with the SHA384withRSA4096 certificate, a requirement in Android 12 for authorization, is failing the authorization process.

CSCwh41977

Verify the existence of per-user DACL on Cisco ISE configurations in Cisco ISE Release 3.2.

CSCwd21798

CSCwi53104

Exporting a report for a time period of over one month provides a report with no data.

CSCwj72680

HS_err files are being generated on the MnT nodes.

CSCvv77007

Cisco ISE is constantly requesting internal super admin users in response to external RADIUS token servers.

CSCwh46877

A COA port-bounce must take place when an ANC policy with PORT_BOUNCE is removed.

CSCwj72117

Operational data purging only shows the name of the primary monitoring node.

CSCwh32290

After performing a reset configuration with the FQDN value, a mismatch occurs between the GUI and the CLI.

CSCwc80574

Cisco ISE AD connector fails during a join operation.

CSCvg54133

There are changes to the hostname during printing on the CLI.

CSCvz62183

The debug profile isn’t removed when the "reset to default" option is used in the debug log configuration.

CSCwk13234

Old Cisco ISE nodes are shown in the TCP dump and debug profile configuration after a restore operation.

CSCwj07675

Cisco ISE Release 3.2 is sending outgoing RST packets with APIPA IP 169.254.4.x.

CSCwf44942

Cisco ISE PSN crashes when maximum number of users are a part of the user session authentication flow using TACACS.

CSCwf22816

Authorization based on internal user ID group is failing without the RADIUS-token authorization for VPN.

CSCwi74567

Corruption in the Cisco ISE portal due to inconsistencies in the database.

CSCwh39802

Cisco ISE is sending misleading messages when it’s unable to send an email to a guest after sponsor approval.

CSCwi72309

Cisco ISE is stuck in a profiling loop, slowing down replication, and causing errors.

CSCwe96739

TLS 1.0 or TLS 1.1 is accepted in the admin portal of Cisco ISE Release 3.0.

CSCwf54680

Unable to edit or delete authorization profiles which have parentheses in their names.

CSCwj74175

Compress restprobe-OOMHeap dumps.

CSCwf60904

ANC remediation isn’t functioning properly with AnyConnect VPN.

CSCvm56115

Cisco ISE allows a policy to be saved even when the corresponding ID store is deleted from another browser tab.

CSCwf56826

Cores related to jstack can be observed on the primary PAN nodes in a regression setup.

CSCwd20521

AD connector process doesn’t shut down.

CSCwh79938

You can’t set the value of the preferred domain controllers registry during advanced tuning.

CSCwh03306

Threads get blocked on primary PAN if the port 1521 isn’t available.

CSCwf78003

The endpoint details in the pxGrid Endpoints page are incorrect.

CSCwh42683

Read-only permissions provided for Cisco ISE admin access during SAML authentication.

CSCwi58699

COA is triggered using a Guest Flow when Cisco Catalyst Center or Endpoint Analytics dictionary attributes are updated on Cisco ISE.

CSCwh01906

The deleted MDM server is still listed in the allowed values under MDMServerName attribute.

CSCwi88583

The erl_crash.dump must be handled in a better way.

CSCwi42628

MAR cache replication fails between peer nodes for both NIC and Non-NIC bonding interfaces.

CSCwi75143

Unable to update the profiling settings as the PriorityType is mandated.

CSCwf97087

Posture feed update error is incorrect when there’s a problem with the proxy.

CSCwj76445

Cisco ISE ERS Guest documentation should be updated to exclude the Portal ID from GET calls.

CSCwi93050

Endpoint import fails for RBAC when Azure SAML is used for administration access.

CSCwi12671

The TCP Dump diagnostic tool doesn’t allow for simultaneous multiple interface captures on a node.

CSCwi33361

Problems seen with Cisco ISE CLI access as it fails to connect to the server.

CSCwh08440

Live log events 5422 and 5434 don’t show any data in the Authentication and Authorization columns.

CSCwi34405

Unable to enforce the IdentityAccesssRestricted attribute in the authorization policy.

CSCwj58727

Cisco ISE shouldn’t allow a user to save the Allowed Protocols when no protocols have been checked.

CSCwf59338

Lack of cross-origin HTTP security headers in Cisco ISE.

CSCwh95022

Sponsor portal shows the wrong days of week information in the "Setting date" tab when using the Japanese GUI.

CSCvq79397

Cisco ISE GUI pages aren’t loading properly with custom administration menu work center permissions.

CSCwh51156

Cisco ISE can’t load corrupted NAD profiles causing authorization drops due to failure reasons 11007 and 15022.

CSCwh23367

In Cisco ISE Release 3.2, the subject line of the self-registration email truncates everything after the"=" sign on the Sponsor-Guest portal.

CSCvv85789

Cisco ISE HSTS header vulnerability on port 8084.

CSCwj47769

Cisco ISE can’t download Passive ID agent.

CSCwi27497

Cisco ISE REST authorization service isn’t running due to an error in the IP tables.

CSCwj32716

MDM configuration fails when the GUID in the client certificate is used to validate the compliance of the device.

CSCwf55795

With the ADE-OS restore option, the Cisco ISE GUI and CLI aren’t accessible in Cisco ISE Release 3.2 Patch 1 and later releases.

CSCwi38912

The debug elements repeat three or more times in the debug profile configuration in Cisco ISE Release 3.3.

CSCwf40128

Accept client certificate without KU purpose validation as per CiscoSSL rules.

CSCwi20027

The TrustSec deployment request fails as the CoA request gets stuck while fetching NAD information.

CSCwf07855

Cisco ISE SXP Bindings API call returns 2x response when the call fails.

CSCwk38279

The ea.log file must be included in the support bundle.

CSCwh17285

In Cisco ISE Release 3.2 Patch 3 and Cisco ISE Release 3.3, the portals don’t initialize if "IPV6 is enable" is the only IPV6 command on the interface.

CSCwj51329

MDM compliance check fails when there are multiple MAC addresses with VMware Workspace One as the mobile device management server.

CSCwf02093

Nodes in Cisco ISE Release 3.2 running on Hyper-V are being assigned a DHCP address in addition to the static IP configured during the initial setup.

CSCwi63725

SNMPD process causes memory leak on Cisco ISE.

CSCwf30570

Agentless posture script is not running if the computer isn't connected to an AC power source.

CSCwh68651

Recreating the undo-tablespace causes URT to fail in Cisco ISE Release 3.1 Patch 7.

CSCwf94289

Policy export fails to export the policies in Cisco ISE Release 3.0 Patch 6.

CSCwj48827

Unable to add multiple tasks within quotes "" in the launch program remediation.

CSCwa08802

Cisco ISE Release 3.1 on AWS gives a false negative on the DNS check under health checks.

CSCwh88911

Cisco ISE database only allows for 100 characters in the email field for a Sponsor account.

CSCwf09393

In Cisco ISE Release 3.1, the services fail to start after restoring a backup from Cisco ISE Release 2.7.

CSCwf79582

AD Credentials fail to integrate with Cisco ISE with 2.2.1.x and later releases.

CSCwe99498

Cisco ISE includes a version of libcurl that is affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs: CVE-2023-27536,CVE-2023-27535,CVE-2023-27538.

CSCwh33160

Cisco ISE isn’t sending SNMPv3 disk traps to configured SNMP servers.

CSCwh99534

The endpoint probe doesn’t clean up SXP mappings.

CSCwj95818

Maximum concurrent CLI sessions don’t work in Cisco ISE Release 3.4.

CSCwf61657

Gig 0 always participates in the TCP handshake of the sponsor FQDN.

CSCwh92185

RADIUS Authentication reports exported from the Operational Data Purging page are empty.

CSCwi54722

Redirect URLs using FQDN that end with the IP address have the IP address replaced by the Cisco ISE hostname.

CSCwh58768

Unable to delete existing devices in the My Device portal after restoring from Cisco ISE Release 2.7.

CSCwi89466

Cisco ISE AD User SamAccountName parameter is null for user sessions in Cisco ISE Release 3.2 Patch 3.

CSCwi78164

Cisco ISE DNS Resolvability Health Check fails due to a duplicated entry (IP, name, and FQDN).

CSCwk04493

Methods used for retrieving policy details use the internal method and aren’t cached in Cisco ISE Release 3.1 Patch 6.

CSCwj03747

Profiling isn’t suppressing CoA even if the option to suppress CoA for specific logical groups is enabled.

CSCwh21038

The session information isn’t stored in the time session cache during third-party posture flows.

CSCwj80616

Endpoint details in the Cisco ISE Context Visibility page don’t match with the RADIUS live logs or sessions during the MDM flow.

CSCwj48625

Agentless posture fails for EAP-TLS flows with multiple domains configured for endpoints to log in.

CSCwi45879

Unable to select hotspot portal if an existent or duplicated authorization profile is selected.

CSCwh65018

The Cisco ISE Release 3.1 Patch 5 install stalls indefinitely.

CSCwj59848

The Log Analytics page isn’t launching in Cisco ISE.

CSCwh08408

Cisco ISE Release 3.3 can’t register new nodes to the deployment after an upgrade as the node exporter password isn’t found.

CSCwh72754

Impact on the authentications that use Active Directory as the identity source.

CSCwi66126

Updating the DACL doesn’t modify the last update timestamp in the Cisco ISE ERS API.

CSCwi98793

Profiler is caching the MDM attributes with wrong values.

CSCwf37679

Sponsor permissions are disabled on the sponsor portal when they are accessed from the primary PAN.

CSCwi30707

In Cisco ISE Release 3.1 Patch 7, the removed device types can still be selected in the policy set.

CSCwi52041

Changes in rank cause the authorization rule to be committed to the database table which triggers the save call from the G UI

CSCwf98849

A critical error seen in Client Provisioning Portal customization.

CSCwi59312

Cisco ISE authorization profiles don’t persist data with "Security Group" and "Reauthentication" common tasks.

CSCwh92117

The Sysaux tablespace is full due to the growth size of the AUD$ table.

CSCwf17714

Multiple entries of DockerMetric seen in reports in Cisco ISE Release 3.3.

CSCwc36589

Cisco ISE - Intune MDM integration may be disrupted due to the end of support for MAC address-based APIs from Intune.

CSCwf72918

In Cisco ISE Release 3.2, the order of the IP name-servers in the running configuration isn’t respected.

CSCwf67438

Some VNs from the Author node aren’t synced to the Reader node.

CSCwj52266

Endpoint description in the Context Visibility page is updated with the Static Identity Group description.

CSCwi94938

In Cisco ISE Release 3.2, the guest user API gives incorrect results when the filter is used.

CSCwj07717

Cisco ISE audit reports log APIPA addresses as the source of the API requests.

CSCwh28098

In Cisco ISE Release 3.2 Patch 3, the CoA Disconnect call is sent instead of the CoA Push call during a Posture Assessment when the RSD is disabled.

CSCwh46669

After the administration certificate change, Cisco ISE doesn’t restart the services if the Bond interface is configured.

CSCwj43480

Cisco ISE Release 3.3 doesn't invoke MFA for the user with UPN (User Principle Name).

CSCwe53550

Cisco ISE and CVE-2023-24998.

CSCwi15793

An error with custom attribute special characters in Cisco ISE.

CSCwi89082

The Cisco ISE default portal is deleted from the database and is needed for SAML configuration.

CSCwh92366

Observing the Insufficient Virtual Machine Resource alarm in Cisco ISE Release 3.1 Patch 8.

CSCwj06269

No report or alarm is triggered for changes in the Device Administration settings.

CSCwj33906

IP or SXP mappings aren’t created for VPN clients.

CSCwj21403

REST authorization services won’t be enabled when hosts have multiple entries.

CSCwj36716

Cisco ISE Self-Persistent Cross-Site Scripting (XSS) is seen in My Reports.

CSCwh56565

Primary PAN REST calls to MnT nodes for live logs and reports aren’t loaded balanced.

CSCwk61938

Cisco ISE to evaluate OpenSSH CVE-2024-6387.

CSCwh95232

Cisco ISE allows duplicate interface IP addresses.

CSCwi21020

Cisco ISE messaging certificate generation doesn’t replicate the full certificate chain on secondary nodes.

CSCwf05178

Running the URT shows cosmetic warnings or errors.

CSCwi26921

The DumpClearOnExceed files can be seen by using the "dir" command in the Cisco ISE CLI.

CSCwj40026

Backups triggered rom the Cisco ISE GUI have errors saying that backups were triggered from the CLI.

CSCwe03624

Smart license registration failure with "communication send error" alarms triggered intermittently.

CSCwf81550

Cisco ISE is changing the MAC address format according to the selected MAC address format even when it isn’t a MAC device.

CSCwh36667

Cisco ISE monitoring GUI is stuck at the "Welcome to Grafana" page.

CSCwk07324

The main thread pool in Cisco ISE is stuck due to the ACE third-party library ContextIn leak.

CSCwh74236

The detailed Live Log page isn’t loading for the TACACS+ authorization flow.

CSCwi25755

SAML Provider can’t be added in Cisco ISE Release 3.2 and later releases.

CSCwi23166

Unable to save changes in the patch management condition.

CSCwh03227

Cisco ISE doesn’t use the license during authorization.

CSCwh71435

The "Enable Password" of the internal users is created even when it’s specified through ERS API.

CSCwh44407

The System Certificate Import doesn’t work for Cisco ISE nodes in a deployment in Cisco ISE Release 3.2.

CSCwj57668

After upgrade, the MFC Profiler dashboard displays no data.

CSCwk38205

SGTs are not deleted when an ACI connection is deleted.

CSCwk39635

Duo MFA with VPN login does not work with MS-CHAP-v2.

CSCwk67747

RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS).

CSCwk74068

SXP bulk download missing entries after SXP node reload.

CSCwk78054

Endpoints are not listed in the Context Visibility page, but they are listed in the Live Logs and Live Sessions pages, when a standalone node is assigned both PPAN and PSN personas.

CSCwk79595

Page-level help for Inbound and Outbound SGT Domain Rules page is not working.

CSCwk85207

Authorization fails if DACL is not found in the ISE configuration.

CSCwk98200

The following error is received under Administration > Identity Management > External Identity Sources > SAML Id Providers:

Signing certificate validation failed, error: 
The IdP signing certificate is self signed and cannot be found in Trusted Certificates. 
Check Trusted Certificates contain the IdP signing certificate.

CSCwk98467

Data Upgrade and Restore from Cisco ISE 3.3 to 3.4 fails if the username suffix is not configured in the REST ID store.

CSCwm35551

After exporting network devices from the Cisco ISE GUI, the values under Network Device Groups in the CSV file are different from the values in the Cisco ISE GUI.

CSCwm38203

With the Bring Your Own Device (BYOD) workflow on MacOS 15.1 Beta 2, when you download the Cisco Network Setup Assistant application and try to open it, the following error is generated:

Unable to check for updates

CSCwm05210

Getting '500 internal error' when sending ISE 9060/ers/config/endpoint/{MAC address}/releaserejectedendpoint.