Resolved Issues

the following table describes the issues resolved problem report description release 22 8r1 11 1753137 fixed zta user session time out values graying out by default in the global settings 1855748 fixed a rare condition where the load balancer could briefly fail to route api requests to the gateway service despite all backend services being healthy recovery from transient network interruptions has been improved to ensure consistent api availability release 22 8r1 10 1748942 isac zta connection is disconnected incorrectly after idle timeout in some cases 1764253 when labeling (white labeling) in global settings are applied or modified in the tenant, these changes are reflected now in zta release 22 8r1 9 1734518 user groups created with the default rule in zta did not map enrollment, resulting in users experiencing a “no roles” login failure this issue has been fixed user groups now correctly map enrollment, preventing “no roles” login failures at user sign in release 22 8r1 8 1745607 the default vlan id option now appears in the zta gateway 1708539 admin can now create a device rule for av, as, fw, or hdencryption device policies with only a product name specified and the vendor field left empty without any issues 1713473 updated the zta status page redirection url on the unreachable tenant notification previously, when the zta url/tenant was not reachable, users were provided with a link to view the zta status page the link redirected to https //pulsezta status pulsesecure net/ (the old status page url) 1698492 standalone zta gateways registered to the controller cannot be added to the zta gateway group when trying to create new gateway group 1698564 enabling debug logs for zta gw under troubleshooting is failing 1630297 admin will see the message "interface not enabled or invalid interface" when trying to perform portprobe from zta gateway troubleshooting commands with 22 8r2 3 v 723 gateways registered to 22 8r1 4 controller release 22 8r1 6 1637355 zta client web enrollment failing with 500 internal error in clusters release 22 8r1 2 1525094 schedule log export fails to generate an export(csv/json) if it is scheduled for a week release 22 8r1 1 1391923 the admin might notice discrepancies between the device counts in the summary panel and the table view when clicking on the counter 1512873 fixed the issue with report jobs failing when creating an adhoc/scheduled job and sharing the report with any admin user in the tenant has been resolved 1509852 the issue with deleting domains from manage application page is now resolved release 22 8r2 1 (zta gw) 1505663 the issue with the unresponsive state of zta gateway due to disk space issues on azure is resolved release 22 7r1 6 1431458 the issue with certificate renewal for zta gateways using controller is now resolved 1447143 the issue with the active users information not shown in the nsa license subscription page is now resolved release 22 7r1 4 1375681 application logo will be blank when trying to install the ivanti secure access client from the web browser flow just before it starts downloading the client release 22 7r1 3 1350330 consolidated overview data for all zta gateways is not reflecting no data on neurons for zta > insights > overview page 1341772 sankey chart does not show the exact path for application being accessed with respect to usergroup 1375846 unable to acknowledge all active anomalies under overview page 1378162 overview page should display all the gateways registered with the controller release 22 7r1 2 hf2 1350400 observing slowness when navigating to secure access policy creation and applications pages 1350442 gateway configuration tasks from controller are stuck in pending state 1350471 auto delete of users failing in zta controller after 30 days of inactivity 1350376 configuration sync not working with snmp configuration 1349527 unable to create multiple user groups when mapped with same rules release 22 7r1 2 pzt 37411 cef browser is restricted by domain/group policies, you need external browser support for saml based enrollment and authentication pzt 43982 error in adding sso url with " " while creating saml auth server release 22 7r1 pzt 42710 if a user group has a saml attribute user rule mapped to it, changing saml auth to local auth in the user policy should alert with a warning pzt 42721 analytics dashboard shows the mdm device attribute failure if there is a hybrid device policy(location, hc, mdm) enforced on secure access policy wherein the non compliance is actually due to hc/location failures pzt 41958 zta gateway shows upgrade failed and shows a different version on the secure access gateways dashboard when upgraded to latest version but the console of the gateway is successfully upgraded pzt 41821 gateway ui will not validate ip address /subnet and subnet gateway info while creating zta gateway under manage gateways pzt 43953 if the vendor name field is left blank in a windows firewall device rule, it will result in the aaa journal version being decremented to 1 release 22 6r1 2 pzt 41502 add/delete gateway in the gateway group is not working pzt 42203 while editing an existing fqdn app policy with app discovery enabled to a url based policy, app discovery checkbox gets greyed out and not editable pzt 41797 upgrade/downgrade of esap might cause bad config state, if configured product not present in old release release 22 6r1 pzt 41452 fixed wildcard with unsupported fqdn format pzt 41443 zta gateway upgrade issue with vmware esx pzt 41414 error when loading end user login or any other sign in policy page pzt 38904 new gw deployment loses the interface configuration and controller registration details upon reboot from gcp instance options pzt 41401 unauthorized error 401 is displayed when trying to login as readonly/cxo/netadmin to the controller not having any gateways registered pzt 41264 page not found when trying to login with the pre canned network admin role configured under system >admin roles pzt 40857 non compliance policy failure reason is empty on the drill down log view dashboard when non compliance is reported while accessing rdp/ipv4 application type pzt 40518 endpoint connection to the controller will fail and show the status as 'failed' when rule requirement >custom expression is configured under secure access > manage devices >device policies due to aaa journal version failure pzt 38858 after upgrading mod aaa to latest build, assigned roles are missing in cache and admin login might fail pzt 38428 location device rule does not save properly when denying access from a specific city but allowing access from the same country pzt 38625 controller ui should show error while creating gateway group if one of the gateway in the gateway group is mapped with a known network tag in gateway selector configuration pzt 36750 lockdown enable/disable done on tenant, taking 3 9 minutes to reflect in client connstore dat file pzt 36813 risk sense evaluation for windows 10 22h2 endpoints is returning as 'not available' release 22 5r1 3 pzt 41314 the connection status is shown as connecting and some users are not able to establish the connection pzt 41403 data is not loading on insights > overview page release 22 5r1 2 pzt 40843 fixed log swap issue between the gateway and timestamp fields pzt 41180 page not found error while clicking on administration > admin management > admin roles with read only admin (pre canned role) logging in release 22 5r1 pzt 39870 multiple sap policies having device policy configured with av rule results in incorrect cache on aaa pzt 37841 report format csv/json has the epoch timestamp instead of human readable release 22 4r3 pzt 38599 when device rule is edited, corresponding sign in policy does not get updated with new policy pzt 39103 issue in downloading logs from nsa is now resolved pzt 39050 new gateway deployed in gcp looses it's configuration upon first reboot from gcp instance options pzt 39351 application details with kerberos/ldap/ntp not detecting when migrating from ics to zta pzt 29634 after upgrade or rollback gateway certificate is shown wrongly in gateway group release 22 4r1 pzt 37223 zta connection fails with invalid client certificate error pzt 38173 user name not displayed properly in tenant access logs pzt 38101 if 22 2r1 or below version of gateways are present and ogs feature is configured, older gateways may not go to ready state pzt 35144 admin rules cannot be deleted when attached to an admin group release 22 3r4 pzt 36792 if a sap is created with stand alone non ready gateways then that can trigger skipping of all the applications that have ogs pzt 37610 when admin navigates to sap page and expands two app groups, same apps are shown for both app groups pzt 37611 when admin navigates to sap page, performing app group expansion and changing records per page leads to disappearance of expand option in sap policy groups release 22 3r2 pzt 37228 error while loading the secure access policies page release 22 3r1 pzt 26902 dynamic tunnel ip nat rules are not seen on gateways when a newly added gateway is added to a gateway group pzt 29624 the msp admin portal ui is throwing an error when kept idle, and then not redirecting to the login page pzt 31679 an unregistered gateway's status should show as offline in the "gateway by status" chart drill down view when log grouping is applied, and also on the landing page gateway detailed view pzt 32217 search api triggered multiple times with different payload due to which the logs are not getting filtered intermittently when navigating from insight logs to gateway logs and vice versa pzt 33284 if saml user authentication is configured before enabling a custom domain, the saml policy remains configured with the standard domain url pzt 35770 \ invalid client certificate error 1147 is seen during user connection pzt 36790 no alert generated for policy configured on enrollment urls prs 412051 the user is prompted multiple times to switch to the new ui when upgrading release 22 2r1 pzt 15594 client configuration disable splash screen option is not working pzt 22198 mac intune client is not launching automatically after the client installation pzt 23470 cef eup on mac with system local auth, some sso apps are not launching with safari as the default system browser, with a certificate prompt appearing twice pzt 24993 linux windows multi sign in changing the user sign in url from one url to another is not prompting for fresh credentials pzt 26431 certificate rotation on macos when the device certificate expires and the end user attempts to connect, "error 1151" is not prompting properly pzt 27640 summary ribbon tile charts are not aligned properly pzt 28838 gateways overview an l4 dashboard should display only the chart and table data based on the drop down selected on the originating l2 dashboard chart for example, selecting to view "major errors" should not show other error severity levels in the l4 view pzt 28841 logs in the gateways overview l4 dashboard for the "gateway stats" chart shows only the current state (active view) logs despite the parent l2 dashboard page having a non active view time period set pzt 28844 unable to use the group by feature with all the keys on the gateways overview l4 dashboards of "top 10 gateways by errors", "access trend" and "gateway stats" pzt 29143 unable to filter and search with "gateway status" set to "offline" and "gateway version" set to "pre 22 1" on the gateways overview l4 dashboard of "gateway stats" pzt 29281 gateways overview "top 10 gateways by health" chart displays the gateway statistics only for pre 22 1 s for "previous day" and "previous week" historic views pzt 29811 log export might fail if the number of logs to be exported is more than 400k pzt 32742 gateways older than the version provided with 22 2r1 are entering a bad state due to the inability to apply journal updates after 15 minutes, the gateway will do a full config pull and recover release 22 1r1 pzt 21416 eup accessing rdp and ssh application links does not pick the default application installed on the device pzt 21813 regression bookmarks api response is fluctuating between 200 success and 500 error http response codes under certain scenario pzt 24098 global device preferences the client is not honoring "allow delete connection" pzt 24546 multi sign in urls login behavior is different for with standard login and non standard multiple sign in login urls when no secure access policy (sap) is configured on the controller pzt 27300 in a location device rule, it is not possible to update the city field by just typing locations rather than selecting them from the drop down list fields pzt 27538 date picker is popping out of the main dashboard on the connected clients chart l4 detailed logs page, as the title of the chart is long pzt 27546 policy failure page summary strip is populated by data for the previous day when the weekly historic view is selected pzt 27593 configuring a saml auth server using the manual method while leaving "idp slo service" field empty can cause a 500 status code error pzt 27743 due to low network bandwidth availability, upgrading a gateway to the 21 12r1 95 build fails (the event logs shows "http error 409 after put" messages continuously) pzt 27999 ca rotation breaks leaf renewal for 21 9 3 12679 release 21 12r1 pzt 26604 sessions are not timing out on the controller even when there is no corresponding user session on a client device pzt 27416 handle the policy failure by locations chart visibility on policy failures page release 21 6r1 pzt 20309 error while installing the client release 21 1r1 pzt 15937 "dsunitytaskd" process failed in esxi 189 gateway while upgrading to 131 release 20 12r1 pzt 15533 client configuration save user credentials option does not work release 20 10r1 pzt 10907 configuring single user rule to match multiple values is not supported release 20 9r1 pzt 11677 saml authentication fails if the azure metadata is uploaded for first time