Cisco Cisco Identity Services Engine 1.0.4
54
Release Notes for Cisco Identity Services Engine, Release 1.0.4
OL-25482-01
Known Issues
For more information see
Cisco Secure ACS-to-Cisco ISE Migration User Interface Issue Using IE8
There is a known migration consideration that affects successful migration of Cisco Secure ACS 5.1/5.2
data to the Cisco ISE appliance using the Cisco Secure ACS 5.1/5.2-ISE 1.0 Migration Tool.
data to the Cisco ISE appliance using the Cisco Secure ACS 5.1/5.2-ISE 1.0 Migration Tool.
The only currently supported browser for downloading the migration tool files is Firefox version 3.6.x.
Microsoft Windows Internet Explorer (IE8 and IE7) browsers are not currently supported for this
function.
Microsoft Windows Internet Explorer (IE8 and IE7) browsers are not currently supported for this
function.
For more information, see the
.
User Identity Groups User Interface Issue With IE 8
If you create and operate 100 User Identity Groups or more, a script in the Cisco ISE administrator user
interface Administration > Identity Management > User Identity Groups page can cause Internet
Explorer 8 to run slowly, looping until a pop-up appears asking you if you want to cancel the running
script. (If the script continues to run, your computer might become unresponsive.)
interface Administration > Identity Management > User Identity Groups page can cause Internet
Explorer 8 to run slowly, looping until a pop-up appears asking you if you want to cancel the running
script. (If the script continues to run, your computer might become unresponsive.)
Known Supplicant Compatibility Issue Involving VLAN Change Operation on
Windows Client Machines
Windows Client Machines
There is a known issue with the Intel Supplicant version 12.4.x for Windows client machines with regard
to VLAN change for wireless deployments. The client machine has no connectivity because the NIC’s
IP address is in the complaint/non-compliant VLAN when it should be in the pre-posture/pending
VLAN.
to VLAN change for wireless deployments. The client machine has no connectivity because the NIC’s
IP address is in the complaint/non-compliant VLAN when it should be in the pre-posture/pending
VLAN.
Note
This issue affects any supplicant that cannot perform IP address refresh on a VLAN change in a wireless
environment. This issue is related to the VLAN detect (Access VLAN to Authentication VLAN change)
functionality, where the Cisco NAC Agent is not working correctly with wireless adapters.
environment. This issue is related to the VLAN detect (Access VLAN to Authentication VLAN change)
functionality, where the Cisco NAC Agent is not working correctly with wireless adapters.
For more information, see
.
Known Incompatibility Issue with WLC Firmware Version 7.0.116.0
Cisco has discovered a known issue that can occur during a Wireless LAN Controller (WLC) login
session, where the client machine authenticates with Cisco ISE correctly and the corresponding
authorization profile is picked up, but during user authentication the previous authorization profile (for
machine authentication) is applied to the user session again.
session, where the client machine authenticates with Cisco ISE correctly and the corresponding
authorization profile is picked up, but during user authentication the previous authorization profile (for
machine authentication) is applied to the user session again.
This issue has been observed during wireless login scenarios where the WLC is running firmware
version 7.0.116.0, and unless you require new features available only in version 7.0.116.0, Cisco
recommends returning your WLC firmware version to 7.0.98.218 until Cisco releases an up-to-date
firmware version later in 2011.
version 7.0.116.0, and unless you require new features available only in version 7.0.116.0, Cisco
recommends returning your WLC firmware version to 7.0.98.218 until Cisco releases an up-to-date
firmware version later in 2011.
For more information see