Possible bug in ISE 2.3 patch1

[SupportAC]

Hi,

We are having a proble showing the Authentication policies in GUI. After introducing a new authentication policy (Authentication Policy) within the Policy Set Default, the change was saved correctly (this was shown by the popup). However, after this change the authentication policies (Authentication Policy) are not shown, they do not load in the GUI, they appear blank. It has been tried accessing from IE, Firefox, Chrome in different computers and it comes out the same, the problem is in the ISE, for some reason it does not show it.

Why the auth policies are not being showed??? any bug related to this?

Our ISE version is 2.3 Patch1

[Jason Kunst]

Please work through the tac for troubleshooting and problems

[Craig Hyps]

As Jason recommended, if any issue with failure to display or save policies, then this is definitely a matter for TAC.

I will call out some basic facts that you may already be aware of with change to 2.3:

• Individual authentication policy rules (outer rules that select protocol set or proxy) are migrated to be their own policy set.
• When saving rules, you must select option to Use before existing the rule table and then be sure to click Save
• Another issue recently reported with Auth Policy logic was resolved by applying Patch 2, so may be worth attempting patch before call to TAC to see if issue is resolved.

/Craig

[SupportAC]

Hi,

I think we are hitting the bug CSCvg44615. In order to solve it we need to install the release 2.3(0.902), but we go to CISCO download and we can not see that version. This version is out to download??

We only see this patch:

Cisco Identity Services Engine Software Patch Version 2.3.0.298-Patch2-228630. Apply this patch to an existing ISE 2.3.0 installation.  

ise-patchbundle-2.3.0.298-Patch2-228630.SPA.x86_64.tar.gz

[Jason Kunst]

That’s correct it’s patch 2 indlcated with the 902

[Craig Hyps]

See "Patch2" in the filename.

[SupportAC]

Yes, but i can NOT see any reference to (0.902) in the filename. Are you sure that (0.902) make reference to patch2???

thanks

[Craig Hyps · Accepted solution]

The internal build number of 902 refers to patch 2.  The filename for customer display is more intuitively showing Patch 2.  Be rest assured that this is Patch 2 and that defects flagged as resolved in P2 or 902 are incorporated in this patch.