Resolved Issues

22.7R1.5

The issue with the active users information not shown in the nSA license subscription page is now resolved.

The config sync rule execution is fixed by increasing the memory size.

The Auto-Delete setting values are now retained while using filters, switching between tabs, and returning to the Users tab.

22.7R1.4

Config sync is failing with error Missing root or parent certificate. Trusted Client CAs > Trusted Client CA.

User login issues when nSA connectivity is lost on ICS 22.7R2 despite the 24 Hour Grace Period.

nSA - Users are unable to fetch the License from the nSA.

UAL license not working for EU region.

Username sorting is not working on Subscriptions > Users page.

Any number of nodes can be added while creating cluster from nSA.

nSA will allow to add any number of nodes to the cluster with hardware devices while it is restricted to 2 nodes for virtual(ISA-V) gateways registered to controller

22.7R1.3

Sankey chart does not show the exact path for application being accessed with respect to usergroup.

UEBA threat score showing - Request Failed with status code - 500.

Unable to Acknowledge all active anomalies under Overview Page.

Overview Page should display all the Gateways registered with the controller.

nSA Subscription count is showing over consumption with only 25K users and remaining 50K from devices.

Fixed issue with Config Synchronization.

Read-Only Mode not working while using Cluster on the nSA.

Latest Logs are not populating properly in the nSA even though the ISA device has the latest logs available.

Cluster Name Limitations in nSA and ICS.

Auto-Delete of users failing in Controller after 30 days of inactivity

Push config - job status pending, but the logs on the gateway indicate that it has already been completed.

Config sync logs gets automatically removed from nSA.

Gateway Configuration tasks from controller are stuck in pending state.

Ivanti Neurons admin policies are displaying "No data SAML metadata."

Intermediate Certificate of clustered gateway not loading on the nSA.

Misleading Active Gateway details on the Network Overview page.

The gateway overview page is not showing correct data about the Gateway Versions count.

Unable to import trusted client CA to nSA, while gateway accepts same certificate.

Pushing the configuration from nSA caused changes to the split tunneling settings.

The nSA is unable to load the intermediate certificate for the clustered gateway.

Read-Only mode is not functioning while using Cluster on the nSA.

Configuration sync not working with SNMP configuration.

22.7R1.2

Gateway status constantly changes from not ready to ready on the nSA platform.

Issue in decoding entity-ID while uploading config to nSA.

Readiness failures observed in Gateway.

Config sync rule on the nSA shows Failed and Pending status.

Issues with Tenant Creation when subdomain has .(DOT) via MSP Portal.

Performance statistics and other graphs are not visible on nSA.

SNMP trap messages under Event log to be removed.

License seat utilization remains constant at 273 users on nSA.

Analytics data is not populated on nSA Dashboards.

Single node cluster to support config sync and Report generation.

nZTA messages can to be more descriptive.

22.7R1

ICS Gateway Packages Release Date shown is incorrect under Installation Packages.

License Subscription expired message shown for user with Active subscription.

Gateway connectivity issues and the intermittent log uploading issue seen with nSA.

Config synchronization and Report Generation issue with Single Node cluster.

9.1R18.5/22.6R2.3 (ICS GW)

When the client connection set was chosen, certificates were indicated as dependencies.

Event Log Issues related to external syslog server connection reset.

Gateway is in nSA licensing mode but unable to connect to Ivanti Neurons for Secure Access' to fetch user license

The new user registration process should dispatch the authentication URL instead of the enrollment URL.

The configuration upload to nSA or Pulse one will be initiated again incase there are additional users logging in. If there are constant new users logging in, the full configuration upload will take longer.

Config rule push status for the failed gateway will be in "pending" state in nSA Admin UI.

Config sync push fails if /configuration/system/maintenance/options/gro-on-off is selected.

Gateway status constantly changes from not ready to ready on the nSA platform.

The status of the configuration synchronization template is stuck in the Pending state.

Number of Users exceeds Realm Capacity error seen with nSA Licensing Mode enabled.

22.6R1.2

Report format CSV/JSON has the epoch timestamp instead of human readable.

Incorrect selected user roles displayed for Split tunneling policies.

Peer SP configurations are not getting uploaded to nSA with appropriate title.

Gateway information not being synced with nSA on 22.5R2.1 version.

ICS is synchronizing users in Auth Servers to Pulse One.

ICS Gateway (Event, Admin and user access) Logs are not seen in nSA controller.

HTTP error 500 after PUT and Unknown errors in Gateway Events Access logs

Config sync rule on the nSA shows Failed and Pending status.

Unsupported attribute type 0' errors in Gateway Admin Access logs during config sync operation

Config rule push status for the failed gateway will be in "pending" state in nSA Admin UI.

22.6R1

nSA Subscription users page is not listing users when the number of reserved license seats are more than 20K. Pagination is now added on User Table UI page along with new UX table changes.

SAML authentication server configuration with incorrect values.

Configuration changes made through the nSA UI to the ‘source’ gateway do not reflect or have a very long delay in being reflected in Multinode Config Synchronization templates.

Incorrect selected user roles displayed for Split tunneling policies.

Pagination not working with user roles in nSA.

nSA Reports: Dropdown shows max 100 options (all dropdowns).

When multiple client packages are present in gateway, errors are seen while uploading configurations to nSA.

ICS not sending logs to nSA and sessions are not reported.

22.5R1.3

Data is not loading under Insight > Applications.

22.5R1.2

Upload ESAP Packages issue on nSA is fixed.

Fixed log swap issue between the gateway and timestamp fields

22.5R2.1 (ICS GW)

As part of logs optimization, Optimized (reduced) the number of API calls triggered from gateways to controller.

As part of logs optimization, Optimized the critical log message in Gateway Readiness API calls from gateways.

As part of logs optimization, fixed Gateway getting disconnected and connection error due to SSL read error log messages.

Fixed issue where sometimes Config upload was triggered quite frequently with no config change done on the gateway.

Log swap issue, where Gateway and Timestamp fields are interchanged after line #1001 is fixed.

22.5R1

ICS is shown as Default upon first login after tenant creation.

When Terminal Service Profile had special characters the config upload fails.

Log enhancements in event logs for failure cases.

22.4R2.1 (ICS GW)

Program unityConfigSpli fails after gateway reboot and config upload.

Program jsonConfigHelpe failed, error message is displayed during cofig upload.

22.4R2

Program failed after upgrading to latest 22.4R2 builds.

22.4R1

Unable to create terminal services profile from nSA

Pushing full configuration to blank target does not happen.

Entire config sync is failing with 'Node 'bookmark' identifier count mismatch' error.

Trying to modify configurations on ICS through nSA Interface, then you have to submit the configuration change multiple times.

22.3R1

Config template: SAML settings XML import fails if FQDN is not configured.

Config Synchronization fails with error.

Configuration upload is not happening after rebooting the Gateway from nSA.

Config Template: Adding local auth server for 22.1R1 template fails.

During Config Synchronization operation, you see 'The system log file is corrupt. Contact Support immediately entry in GW Admin access logs.

Device attribute is not present in role mapping when MDM server is used for device attribute.

On cluster nodes Network > Overview, Port status may appear as incorrect such as blank, Not connected.

Once Client package download starts from nSA to ICS Gateway, any other operations in nSA (For example, Role/Realm creation, any config modification)

"Add to all VLAN route tables" option is not present in nSA.

Mac address and link local address are not present for internal/external/management port in nSA.

TOTP User status is shown as Unlocked, even after unlocking from nSA.

Role name not present in "Applies to Role" for any Auto Resource policies.

Internal server error is observed while deleting the user roles.

Delay in creating User roles from nSA.

Gateways are not getting listed in nSA after deleting and re-registered.

The edit name functionality for SAML Authentication server is not working.

Binary User configuration file import not supported from nSA for file size above 300 MB.

Unable to delete multiple sign-in URLs on a gateway.

Test Enrollment is not working in Enterprise Onboarding.

'Enable periodic password change of machine account' text-box value of AD server is not getting updated/pushed to Gateway from nSA.

The status of 9.x Gateway in A/P cluster is shown incorrect in nSA, even though they are online and both notification channel and registration.

Logs not related to configuration done from configuration template is visible under Config Template > Logs.

The configuration is not pushed to the Gateway, when adding a disconnected state Gateway to the configuration template.

22.2R1

nSA UI must indicate to Admin if the template configuration is modified using Gateway Admin UI.

Test Connection to LDAP and Remote TOTP authservers fail, when executed from nSA UI.

When invalid file (.rec) is uploaded while creating ACE server, which affects the entire config group management feature.

Activated/Default Ivanti Secure Access Client package details are not displayed in nSA.

Ivanti Secure Access Client > Components page in nSA displays different client package versions details when compared with ICS Gateway.

The Trusted Server List popup is displayed incorrectly.

Entity ID is not fetched for SAML metadata provider settings.

User Role fails to push to Gateway with NFS file attribute errors.

UI issues observed in Always On VPN wizard.

Unable to download the MIB file in SNMP tab in log settings.

Post Registration and during config upload, authentication realms admin related logs printed in Gateway event logs.

Test Connection functionality in MDM Auth Server is not working properly in the Gateway.

IP address configuration getting pushed from nSA to Gateway but not visible in nSA.

Not able to create any type of MDM Auth Server.

Search option is not available in users list for system local auth server.

Internal server error is displayed when user realm configured from nSA with multiple Auth servers.

Under the code signing page, delete certificates functionality is not working properly.

"Not found" error is seen on Hostchecker options page when connection control policy is not configured.

22.1R1

View All link from the "Gateways Access Trend chart" from Insights > Gateways page, shows incorrect total rows count on the table.

Adding a Gateway to a cluster in GW UI does not add the cluster as a group on nSA.

nSA shows L4 connection as WSAM instead of PSAM connection.

Cluster is not deleted from nSA on deleting the same cluster from Gateway UI.

User can see same Host Checker (HC) policy with multiple entries (one with space and the other without) on the Gateway Overview page.

nSA shows "Gateway status not ready" due to an error encountered in ICS.

When HTML5 bookmark backend resource is not reachable from the Gateway, nSA insights doesn't show the HTML5 bookmark access details.

9.x PCS: When the user opens internal directories/files for a particular file bookmark of 9.x, an additional active application count is observed on nSA.

Default "Meeting Sign-In Page" is missing at "Authentication > Signing In > Sign-In Pages" on VMware VM in 9.12.

9.x PCS: WELF filter is missing in the filters section, and two JSON filters are present.

Unable to create Resource profile file of type Unix.

Default welcome banner shows up the text "Connect Secure" when upgraded from version 9.1R12-14139 to 9.1R12-15707.

ICS Gateway: The source IP of an end-user session is sometimes seen as 127.0.0.1 under Insights.