Resolved Issues

Release 22.7R2.8

Not able to edit a file bookmark name when the configured URL contains <USERNAME> syntax.

Improved ICS clock and NTP stability.

NTP timezone setting not handled correctly during upgrade or configuration import.

Problems getting certificate information via API.

Radius authentication fails when using the secondary server after the upgrade to 22.7R2.6.

Temporary unavailability of Ivanti Secure Access extension for Google Chrome.

Graph gaps appear when there is an NTP event restart with time corrections. NTP stability improvements will limit the impact.

dsradiusacct may crash when Radius accounting port is not reachable.

Server on 22.7R2.6, fails to assign clients an IPv6 address from a /64 pool.

Rewrite-server or proxy-server may crash under specific conditions

After upgrade to 22.7R2.6, Web bookmark shows error"The URL is invalid" when mask button is enabled.

Improved handling and logging of watchdog when it encounters high FD values.

Geolocation names have been updated to match current ISO-3166 values.

This may require manual adjustment of some Geolocation rules.

Bookmark created for downloading the installer file is not working in ICS 22.7R2.3 and above versions.

Offer Home/Reconnect prompt upon session end in Advanced HTML5.

SAML process crashes during internal ICT scans on ICS Versions 22.7R2.3 and 22.7R2.5.

AD authentication server gives troubleshooting error post-migration to ISA-6000-V.

Unable to save SSO policy on 22.x with user attribute values in file bookmarks.

After upgrading to 22.7R2.1 or later, the logs before upgrade gets deleted.

License Server shows newly created ICS licensing client's platform as ISA-V (Policy Secure) instead of Connect Secure.

ICS shows DNS server as responding even when it does not exist.

Custom Sign IN page not working for Android and IOS users on latest ISA - 22.7R2.3.

After upgrading to 22.7R2.3, the iveVPNTunnels SNMP data is displaying as zero.

Failing to configure "Attribute based bookmark " with Advance HTML5.

Upload Custom Page and XML failure on 22.7R2.3.

Archive setting is removed after server is upgrade from 22.7R2 to 22.7R2.2.

Issue with Custom Sign-In Page Unable to Modify Secondary Credential Labels.

System Time is drifting when the Time is set Manually from Browser

Validation is missing for Network Connect ACLs when modified through REST/XML.

Multiple login sessions are seen when using custom sign-in page.

"Enable IPv4 Address Assignment to Clients" option is Disabled upon upgrading to 22.7R2.3.

Not able to add file share path as user bookmark.

Unable to go back to previous folder.

VDI bookmark is not shown in the End user page and works fine in Admin UI page.

Release 22.7R2.7

Web Process stops randomly, generating crashes.

Smart Card authentication detection failure during advanced HTML5 RDP login.

One or more web processes get stuck in infinite loop during SSL handshake resulting in High CPU.

Web process crash leading the user disconnections in ICS 22.7R2.6.

SMBCONF process crash during AD reset join issue.

Web Radius EAP crash issues.

ESP falls back to SSL and after some time the node freezes completely causing all connections to drop.

Virtual VMWare server running 22.7R2.5 with multiple web process crashes and certain users get disconnected

Kernel panic is noticed on ICS Version 22.7R2.6 when ESP transport mode is used.

After upgrading to 22.7R2.6 many users are unable to establish their VPN connection.

After the upgrade to 22.7R2.6, users started getting error 1132.

Release 22.7R2.6

Unable to change background color on Sign-In Page 22.7R2.5.

Enable Setting view for Role showing unchecked option, when the features ( HTML5,VPN and other option ) for role is enabled.

Unable to change background color on Sign-In Page 22.7R2.3.

ICS kernel panic during upgrade.

With nSA license, few users are not reflecting in users page in the controller.

PSAM Ivanti Secure access client is not Launching automatically or connecting Automatically.

Advanced HTML5 Session Recording is Not Working From ICS 22.6R2.3 and Above.

FQDN based PSAM resources become inaccessible in ICS 22.7R2.4 due to PSAM DNS cache lacking the response for FQDN's.

PSAM issues in accessing FQDN resources with uppercase letters in ICS 22.7R2.4.

PSAM FQDN resource access denied despite IP Addresses being present in DNS cache in ICS 22.7R2.4.

Accessing the Sign-In URL redirects to PSAL helper page with upgrade helper installation prompt In ICS 22.7R2.4.

Inability to configure custom Radius login Page due to missing Defender.thtml file on 22.x versions.

Unable to Create Active Directory Server on ICS 22.7R2 and Above When Domain Field Contains '_' Character.

Issues with SSO and Credential Parsing for Adv HTML5 and unable to access RDP Connection.

Advanced HTML5 W/ NLA bookmarks overrides settings for the additional NLA bookmarks.

Special Characters are not allowing in 22.x for selective pushConfig/ ImportExport

Issue with SSH Access to HTML5 Resource on Debian 11: Scrollbar and Mouse Wheel Unresponsive.

RemoteDir paths containing spaces causing NullPointerException in 22.7R2.1 Advanced HTML5 Bookmark Access.

File upload in 22.x server allows users to submit more than 5 files but, they can add only 5. If the user adds the 5 files they should be prompted and not given the option to add more than 5.

Content-Length Header (HTTP) in Health check status full response on loadbalancer shows value as "Zero".

Unable to delete Staged package starting from 22.7R2 from the UI.

Unable To Browse the FileShare Resource When a Folder Name has Special Character "&" on ICS 22.7R2.3.

Kernel Panic is observed on the ICS deployed in Azure running on 22.7R2.

ICS server running 22.6R2.3 is seeing License Server Low Level Protocol Errors in the event logs.

REST API for resource throttling providing incorrect response in 22.7R2 and above.

Interacting with File Share Shortcuts Redirects to Downloading .lnk Files Instead of Folder Browsing on ICS Version 22.7R2.1.

Issues with SAML-Authentication Server config sync from nSA controller.

Application Access via Terminal Services Significantly Slower After Migration from PSA Server (9.1R17) to ISA Server (22.6r2.3) despite with same Configuration.

VPN ACL filtering by port is not working as expected.

Computer ICON is missing on the browser toolbar after upgrading to 22.7R2.3.

Cluster Node Hang and Recovery during Active Sync with IKEv2 VPN after migrating to 22.7R2.

Release 22.7R2.5

PSAM users experience intermittent disconnections in ICS 22.7R2.3 with the 22.7R3 client version.

Memory usage increases linearly over time to 100%, causing the device to become unresponsive until it is rebooted.

Release 22.7R2.4

Special characters are not permitted in version 22.x for selective pushConfig and ImportExport operations.

SPI count in debug logs and system snapshot to track memory issues.

Release 22.7R2.3

Upgrade of ICS from 22.7R2.1 or later is failing through REST API

Session Management( idle timeout, max session lifetime, session extension, etc) are not working.

AD domain join takes 15 mins to join.

Release 22.7R2.2

Improved handling of CA/intermediate certificates that do not have a CN value

Addressed issues when using two different CA/intermediate certificates that have the same CN and issuer.

Addressed an issue with swap memory management on ISA8k

Addressed an issue with swap memory management on VM devices

UAL license not working for EU region

Release 22.7R2.1

Users are having failed realm restrictions even when the location is allowed.

User access logs displays the wrong Username, when ending a Terminal Session

Traffic Segregation in Hyper-V is not saving the VLAN ID under available Interface.

Users session gets disconnected on Windows 10 systems due to the Host Checker time out. For more see KB.

IPTable rules default policy set to "ACCEPT" allowing all ports.

User access logs provides 127.0.0.1 address for source IP when an attempt with wrong credentials fails.

Session ID is not displayed in the "Closed connection" logs consistently.

Staging user summary table entries are being appended

JSAM Certificate is expired in 22.7R2

External Integrity Scan is Failing on the 22.7R2 server showing 85 mismatched files this occurred in Azure deployment only

iveConcurrentUsers count is 0 in SNMP Traps.

Sometimes, Advanced HTML5 session does not respond to mouse clicks.

Cluster creation with IPV6 and default VLAN Id is not supported.

Release 22.7R2

Refer to Security Advisory and Patch Release section to see CVEs fixed.

Sending iveMaxConcurrentUsersSignedIn SNMP alert for Leased licenses from License Server.

Keyboard input is printed twice when host and PC language is Chinese.

Geolocation based realm restriction failing for user login.

User access logs Shows wrong Username ,when ending a Terminal Session.

System State storage size has reached max limit.

Automatic detection with "unknown Keyboard" as keyboard layout does not work in Advance HTML5 pre-Login

Wildcard Device certificate deletion with REST API is not working Properly.

Difficulty in Joining Device to Domain Using Only Reset Join option with AD Authentication.

VPN users dropped suddenly on gateway due to reboot.

Avoid False Positives in ICT

High CPU usage is noticed in all of the 12 nodes deployed.

Import of System config/XML config related to bandwidth Management fails on ICS

Certificate Auth failing is due to Missing Authority Key Identifier.

Mitigating login issues through reboot or failover.

Certificate Host checker is failing after upgrading to 22.6R2.

Unable to authenticate user using certificate with "Wrong Certificate::unsupported name constraint type".

“Dropping the duplicate tunnel session from client” is seen in User Access Logs.

SNMP Traps are not being generated when the redundant power supply is turned off.

Singpass (SAML) Authentication fails when Load balancer URL is configured under the "Host FQDN for SAML".

Not able to update ICS server appliance from 22.4R2 to 22.6R2.

SSO stoped working for the FileShare Bookmarks after upgrading ICS to 22.6R2 version.

Rewrite getting blank page via Host-based PTP.

MDM Setup Issues with Microsoft Intune with Authentication and Authorization Challenges.

AD join fails with ISA when Domain name has a special character '&'

SID is not being displayed completely.

iOS 17 has introduced a change in the IKE code, to make it stricter in compliance with RFC7296

Ikev2 error messages seen in the User Access logs.

High CPU usage at 100 % for ICS due to 64K size DNS response.

Scrolling Bar Accessibility Issue on welcome page in Multiple Browsers.

Upgrade to 9.1 R18.1 fails due to SSH/Telnet deprecation check.

Inactivity reminder timeout, when users are using web session post migrating to 22.3R1.

Failing to get Intune MDM Attribute Intermittently.

Chinese characters in file share bookmarks are garbled.

After migration to ICS the Disk Space is showing as full on the active node in A/P cluster.

Website loading slow after the upgrade with PassThroughProxy.

Unable to connect to VPN, SAML authentication fails after upgrading the appliance to 22.4R2.

Unexplained reboots on ISA 8000c A/A Cluster.

DFS Share access is not working with 22.5R2.1.

Web process crash on PSA 7000c due to memory leak.

ICS Azure VM Virtual Wagent showing status not ready and impacting in taking Azure level VM backup in 22.x.

Database percentage = 99, shard 3 operation above threshold.

ICS Realm limits are not honored when nSA Named User Licensing mode is used.

REST-based configuration updates may fail with an HTTP 500 error.

SNMP trap messages under Event log to be removed.

Config sync rule on the nSA shows Failed and Pending status.

Readiness failures observed in Gateway.

Single node cluster to support config sync and Report generation.

Event logs are filled with certificate expired error message.