Cisco Cisco Identity Services Engine 1.2 Notas de publicación

Descargar
Página de 186
 
25
Release Notes for Cisco Identity Services Engine, Release 1.2.x
OL-27043-01
  Cisco ISE Installation Files, Updates, and Client Resources
Issues with Monitoring and Troubleshooting Restores
During a Monitoring and Troubleshooting restore, the Cisco ISE application on the Monitoring node 
restarts and the GUI is unavailable until the restore completes.
Issue with Network Device Session Status Report 
Network Device Session Status report hangs during report generation. If the Network device is not 
configured with SNMP and SNMP community string is not provided, then the report generation hangs 
and never completes.
Workaround for this issue is to enter the SNMP credentials while launching the Network Device Session 
Status report. If there is a large number of network devices configured in ISE, then it is recommended 
to provide snmpCommunity value along with the networkDeviceIP. 
BYOD Connectivity Issue with Devices running Windows 7
Devices running Windows 7 operating system do not connect by default if "invalid" security certificate 
is presented from the server side. This issue is seen if self-signed certificates are in use, or if the 
certificate is signed by a root CA, which is not in the trusted list of the client.
Workaround for this issue is to create a PEAP network profile before connecting to the Single SSID 
BYOD network. After a PEAP network profile is created, Windows 7 displays a user prompt.
Issue with Converged Access Switches
The current available IOS releases for converged access switches, such as 3850 or 3650, may not send 
Calling-Station-ID in the RADIUS accounting requests, which may result in incorrect session states and 
endpoint profiles in ISE. Enter the following commands in the switch to ensure that the ISE data is 
updated appropriately.
radius-server attribute 31 mac format ietf upper-case
radius-server attribute 31 send nas-port-detail
See Also 
Issue with Cisco ISE Mapping to OUI
After installing or upgrading to Cisco ISE 1.2.1, the OUI entries may be missing in the database, which 
might result in the endpoints matching incorrect authorization policies. You need to run the feed service 
to update the OUI. It is recommended to run the feed service after the patch installation to ensure that 
the latest OUIs are installed.
Cisco ISE Installation Files, Updates, and Client Resources
There are three resources you can use to download to provision and provide policy service updates: