Cisco Bug: CSCuo95632 - Status set to non-compliant or compliant before performing posture check
Aug 11, 2016
- Cisco Identity Services Engine
Known Affected Releases
Symptom: The machine could face any of the following symptoms: a) Posture status is set to compliant or non-compliant even before posture checks are performed b) Multiple unwanted CoAs are issued c) Agent install page is displayed in an agent machine Conditions: The bug is hit in any of the following two conditions: (1) Client Provisioning Policy is not configured and user agent string with the words "Mozilla" or "Opera" reaches ISE. This could be a single http packet causing one CoA or multiple packets causing multiple CoAs and confusing the NAD. (2) A valid Client provisioning policy is configured but a user agent string with the words "Mozilla" or "Opera" and without any "OS version" reaches ISE. This could be a single http packet causing one CoA or multiple packets causing multiple CoAs and confusing the NAD.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases