Resolved Issues

the following table lists release numbers and the prs numbers with the summary of the issues fixed during that release problem report number summary release 25 1 3 0 logging and auditing 1706130 log improvement to improve traceability of sml31064 user access log 1702826 improve admin logs for saml sso policy configurations during resource policies creation/editing 1702471 max sessions log entries lack username and session id 1718345 fix the logging context for admin log generated during unlocking of locked totp users 1856647 user access log shows below message even before totp fallback prompt entered in ivanti client ( only noticed via ivanti client based access 1782798 connect secure server running 22 7r2 11 code and faces an issue where host header validation failure logs are wrongly be logged as a terminal services user 1789954 bandwidth consumed field appears blank in user access logs 1951425 incorrect details printed in user access logs for host header validation failures authentication and access management 1626252 fix isac behaviour when incorrect radius challenge token is entered during user authentication 1773336 unable to create ad authentication server with domain name containing single character in 22 7r2 8 and above 1848336 in case of cert auth configured, certificate restriction causing failure even no cert restrictions are configured and fallback not triggered 1863054 err24617 is shown in the ics user access logs, stating that the kerberos tgt time validity is hardcoded to 5 minutes instead of 10 hours, and therefore fails with an error 1786401 crls automatically disabled intermittently, causing user connection issues 1813625 ocsp validation failure in 22 8r2 3 with selinux enforcing mode 1856666 missing eye icon in web browser totp prompt 1856645 ldap auth backup admin removal shows ‘0’ and ‘ ’ in ics device (version 25 1 1 0) vpn and tunneling 1974065 ipad users are unable to establish vpn connections the login process becomes stuck at"host checker loading components", and the vpn tunnel is never established 1716929 users are unable to connect to vpn after upgrading to 22 7r2 8 and above, with the error "removing the connection due to ip allocation failure " 1718464 intermittent ip allocation failures due to tunsetiff error 1841773 ip allocation failure on ics 22 7r2 12 1915919 l3 tunnel fail to establish after authentication over time 1800401 source ip is disabled upon upgrading the server from 22 7r2 9 to 22 7r2 12 clustering and high availability 1724880 duplicate ip addresses on management vlan interface while creating cluster on 22 8r2 1 html5 access and end user experience 1762201 html5 rdp auto launch fails when vpn tunneling is disabled in user role 1797472 html5 rdp session are failing on connect secure 22 7r2 12 when the camera is enabled in the bookmark 1801742 users sessions face an idle timeout issue when the users is using html5 rdp on 22 8r2 2 1864473 login button in session warning page is not clickable on mobile devices on 25 1 1 0 web rewriting and bookmarks 1758145 internal links for alfresco bookmark are not working via rewriter 1753650 server running 22 8x and is unable to access a site through web rewriter 1848360 issue in editing fields while accessing a web resource after upgrading to 22 8r2 1 1849978 "the requested resource is not valid " is seen when the referer header url contains backslash "\\" 1720879 high cpu / ssl loop issues with sharepoint bookmark on isa4000 v file share and resource access 1695554 fileshare access issues due to incorrect fileshare autopolicy created by ics in certain condition 1743404 after migrating from 9 1rx psa connect secure to 22 7x isa connect secure, the browser ctrl f search for the file share feature cannot locate all files saml 1736008 ics is providing corrupted saml metadata while downloading via the connect secure entity id url directly on 22 7r2 9 and above rest api and configuration management 1764337 api and xml import not working properly for mobile os checks 1763112 rest api request to import large number of users fails with error "413 request entity too large" on ics 22 8r2 2 1781955 rest api unable to fetch the mac address of the ics interfaces for some devices and shows as blank 1841711 unable to create syslog server with custom port failed through rest api 1884929 acl validation failure for virtual hostname resources in certain condition on 25 1 1 1 1880336 failure to add custom expressions on 22 7r2 9 due to dictionary memory limit exhaustion network services and protocols 1730391 incorrect interface is used by ics when hostchecker uses ocsp traffic validation for machine cert 1773736 ldaps port support and port range behavior on isa 6000 (22 8r2 1) 1809448 dmi/netconf is not working in 22 7r2 11 onwards system stability and performance 1728074 memory utilization gradually increasing on ivanti connect secure nodes – due to dstaillog process 1801392 high memory usage on ics 22 8r2 2 due to nginx worker processes 1847037 nginx reload causing user disconnections in 22 8r2 3 1809222 recurring “program nginx recently failed” events on ics 22 8r2 3 1837525 high cpu utilization and server freezes on system running ics 25 1 1 0 1800973 manage synchronous way of triggering rewriter processes on ip change to avoid duplicates and result in process exhausion 1846861 1849271 facing internal server error intermittently while accessing admin ui pages after upgrade to nginx licensing 1734668 the system is unable to connect to the local license server and displays the following error license server low level protocol error, server=127 0 0 1 5000, code=\[7] could not connect 1847193 license leasing failure on client node 25 1 0 0 administration and user interface 1739404 psal version build details displayed on admin ui is incorrect 25 x 1798083 config archiving (binary vs xml) with password shows a blank box 1792433 newui enforce post upgrading to ics 22 7r2 12 1713334 post upgrade to ips 22 7r1 10 customer is observing web process snapshot and its changing the time on the snapshot page 1781932 500 internal cgi error message shown to users logging in to ics via web browser after ics upgraded to 22 7r2 11 jsam 1913474 pop up appears while connecting to jsam error "cannot find the hosts file please contact your administrator" 1859146 jsam displays a certificate expiration warning/error even though the application was signed with a valid certificate the validation incorrectly uses the current system date instead of the certificate signing timestamp ueba and analytics 1869101 ueba database appears to be out of date and classifying ip address as wrong country scp and archiving 1738502 22 7r2 10 connect secure server is unable to use scp archive to their windows server that has a p drive set up database / internal processing 1852675 in dsserver execution correct commit while iteration code usage networking and resource access 1832217 intermittent packet loss on internal interface from tunnels leading to resource access failures for all tunnel users, fix 1861971 issues with access backend resources through passthrough proxy after upgrading to 25 1 1 0 secure access / psam 1835947 psam issue persist in 22 7r211 1851546 unable to download dsrecord file from ics when username contains the characters "\\" and "@" release 25 1 1 1 1832217 intermittent packet loss on the internal interface from tunnels causes resource access failures for all tunnel users 1800556 intermittent ip allocation failures in active/active cluster 1813625 ocsp validation failure in 22 8r2 3 with selinux enforcing mode 1792433 client ui mode neux is enforced post upgrading to ics 22 7r2 12 1800401 source ip is disabled upon upgrading the server from 22 7r2 9 to 22 7r2 12 1773736 ldaps port support and port range behavior on isa 6000 1713264 unable to download license via proxy 1846861 navigating through the admin ui intermittently results in the error “the server had an internal error” on various pages in version 25 1 1 0 release 25 1 1 0 this release also includes the applicable resolved issues from version 22 7r2 12 https //help ivanti com/ps/help/en us/ics/22 x/22 7r2 11/rn/resolved issues htm#fixed issues 2857230485 1014912 and 22 8r2 3 https //help ivanti com/ps/help/en us/ics/22 x/22 8r2 2/rn/resolved issues htm#fixed issues 2857230485 1014912 authentication & certificate 1697123 users are unable to access core resources because the rate limiting feature restricts connections in certain conditions 1637539 radius disconnect requests do not terminate the session 1634055 encountered an error "invalid ldap server ip address" 1622322 oauth time skew is not functioning according to the configured values 1651237 waf issue observed when configuring crl (certificate revocation list) 1648859 ics allows sha1 trusted client/server ca certificate to import 1711706 switching from tls 1 2 to tls 1 3, end users are not prompted to select a user certificate and instead see a "missing certificate" error 1772978 3 level hierarchy certificate authentication is not functioning 1680651 rest api based authentication fails when the administrator password contains the special character " ", while the same password works correctly via the admin web gui 1739825 1753262 oauth authentication fails when using pkce (proof key for code exchange) on ics 1742929 ocsp authentication fails as a result of an openssl error bookmark 1670579 multiple monitors use case does not work when rdp bookmark created for smart card vm host checker 1664534 host checker component and psal is not launching for the remediation scenarios in edge and chrome browser psam 1790995 fixed an issue where small file downloads via a web application failed over a psam connected tunnel on 22 8r2 3, with the ics device sending rst, ack this issue has been resolved in ics 25 1 1 0 html5 1641211 rdp print functionality is not working when the print option is enabled in an rdp html5 1777466 unable to create html5 ssh resource profile via rest api 1778321 file upload fails during an ssh session 1384221 advance html5 ssh session fails to login via private key active directory 1641932 in a cluster setup, ueba (user and entity behavior analytics) functionality does not work for the first user who accesses the system after an upgrade 1642170 change machine password in troubleshooting section of ad server configuration does not work 1624127 on the ad troubleshooting page, dns resolution checks fail for some ad servers when multiple ad servers are configured dns resolution is only successful for the ad server that is also configured as the dns server 1634104 ad server uses aes256 encryption type for kerberos authentication protocol even when aes 256 encyption option is not enabled 1590484 node secret is not generated on the rsa server, resulting in the absence of the node verification file on the ivanti connect secure (ics) device 1546749 active directory (ad) traffic segregation is not functioning as expected at both the global and server levels specifically, if dns is configured on a non internal port, domain join fails, and dns traffic does not flow through the non internal port user experience and ui 1641679 screen recording for an end user session fails (recording cannot be saved or downloaded) when the “screen recording end user” option is enabled in a bookmark and an end user attempts to utilize session recording 1574532 an invalid url is accessed in the end user login page, clicking the ok button does not redirect or navigate the user to the home page 1628122 a bookmark is created, the description field automatically includes an extra "0" (zero) 1634866 html5 client copy paste functioality does not work 1717773 blank spaces are appended to the netbios name for macos devices in host checker policy results 1717655 the web login page does not load properly after enabling tls 1 3 1664473 translation errors appears in file upload and save options on end user page waf 1634835 an admin attempts to delete more than 198 users at once, the web application firewall (waf) blocks the request 1634847 no "upload successful" message is displayed after uploading a waf ruleset package 1791256 waf logs missing the source ip address console 1641516 file system check (fsck) related messages are seen in the console 1658693 ics console shows boot manager screen licensing & sync 1634927 android devices are unable to sync emails using activesync 1786386 ios devices using activesync are unable to send or receive emails with attachments after upgrading ics to version 22 8r2 2 nginx & proxy 1721222 nginx process is crashing, resulting in inability to access the connect secure server 1720459 the nginx program recently failed, causing service disruption 1756224 restarting the nginx process results in all user sessions being dropped on ics 1756618 the web page does not display or function as expected when accessed via a pass through proxy api & web resource 1711932 the api put request for realm role mappings fails when there are more than 249 role mappings included in the request 1722707 users receive an err empty response error when attempting to connect directly to ptp (point to point) resources through the rewriter vpn & session management 1691200 vpn sessions disconnect intermittently, displaying the error message "auth check failed, session has expired " 1732180 the radius process crashes unexpectedly on ics 22 8r2 1 1726310 traffic ceases on ssl vpn tunnels following an upgrade to version 22 8r2 1 language, browser & windows terminal services 1720290 psal fails to launch or operate correctly when the browser language is set to any language other than english 1743209 version mismatch between microsoft dlls installed by the installer and the system dlls present on the machine causing issues in wts