Resolved Issues

Release 25.1.1.0

This release also includes the applicable resolved issues from version 22.7R2.12 and 22.8R2.3.

Authentication & Certificate

Users are unable to access core resources because the rate limiting feature restricts connections in certain conditions.

RADIUS disconnect requests do not terminate the session.

Encountered an error "Invalid LDAP server IP address".

OAuth time skew is not functioning according to the configured values.

WAF issue observed when configuring CRL (Certificate Revocation List).

ICS allows SHA1 trusted client/server CA certificate to import.

Switching from TLS 1.2 to TLS 1.3, end users are not prompted to select a user certificate and instead see a "Missing certificate" error.

3-level hierarchy certificate authentication is not functioning.

OAuth authentication fails when using PKCE (Proof Key for Code Exchange) on ICS

OCSP authentication fails as a result of an OpenSSL error.

Bookmark

Multiple monitors use case does not work when RDP bookmark created for Smart card VM.

Host Checker

Host Checker Component and PSAL is not launching for the remediation scenarios in Edge and Chrome browser.

PSAM

Fixed an issue where small file downloads via a Web application failed over a PSAM-connected tunnel on 22.8R2.3, with the ICS device sending RST, ACK. This issue has been resolved in ICS 25.1.1.0.

HTML5

RDP print functionality is not working when the print option is enabled in an RDP HTML5.

Unable to create HTML5 SSH resource profile via REST API.

File upload fails during an SSH session.

Advance HTML5 SSH session fails to login via private key.

Active Directory

In a cluster setup, UEBA (User and Entity Behavior Analytics) functionality does not work for the first user who accesses the system after an upgrade

Change Machine Password in Troubleshooting section of AD server configuration does not work.

On the AD troubleshooting page, DNS resolution checks fail for some AD servers when multiple AD servers are configured. DNS resolution is only successful for the AD server that is also configured as the DNS server.

AD server uses AES256 encryption type for Kerberos. Authentication protocol even when AES 256 encyption option is not enabled.

Node secret is not generated on the RSA server, resulting in the absence of the node verification file on the Ivanti Connect Secure (ICS) device.

Active Directory (AD) traffic segregation is not functioning as expected at both the global and server levels. Specifically, if DNS is configured on a non-internal port, domain join fails, and DNS traffic does not flow through the non-internal port.

User Experience and UI

Screen recording for an end-user session fails (recording cannot be saved or downloaded) when the “Screen Recording End User” option is enabled in a bookmark and an end user attempts to utilize session recording.

An invalid URL is accessed in the end-user login page, clicking the OK button does not redirect or navigate the user to the home page.

A bookmark is created, the description field automatically includes an extra "0" (zero).

HTML5 client copy-paste functioality does not work.

Blank spaces are appended to the NetBIOS name for macOS devices in Host Checker policy results.

The web login page does not load properly after enabling TLS 1.3.

Translation errors appears in File Upload and Save Options on End user page

WAF

An Admin attempts to delete more than 198 users at once, the Web Application Firewall (WAF) blocks the request.

No "Upload successful" message is displayed after uploading a WAF ruleset package.

WAF logs missing the source IP address.

Console

File system check (fsck) related messages are seen in the console.

ICS console shows boot manager screen.

Licensing & Sync

Android devices are unable to sync emails using ActiveSync.

iOS devices using ActiveSync are unable to send or receive emails with attachments after upgrading ICS to version 22.8R2.2.

Nginx & Proxy

The NGINX program recently failed, causing service disruption.

Restarting the Nginx process results in all user sessions being dropped on ICS.

The web page does not display or function as expected when accessed via a pass-through proxy.

API & Web Resource

The API PUT request for realm role-mappings fails when there are more than 249 role-mappings included in the request.

Users receive an ERR_EMPTY_RESPONSE error when attempting to connect directly to PTP (Point-to-Point) resources through the rewriter.

VPN & Session Management

VPN sessions disconnect intermittently, displaying the error message "auth check failed, session has expired."

The Radius process crashes unexpectedly on ICS 22.8R2.1.

Traffic ceases on SSL VPN tunnels following an upgrade to version 22.8R2.1.

Language, Browser & Windows Terminal Services

PSAL fails to launch or operate correctly when the browser language is set to any language other than English.