Specifications

ClearPass 6.2.5 | Release Notes Known Issues Identified in Previous Releases | 33
Chapter 6
Known Issues Identified in
Previous Releases
The following known issues for this release were identified in previous releases. Workarounds are included
when possible. For a list of known issues identified in the 6.2.5 release, see the What’s New in This Release
chapter.
Policy Manager
Table 37 Known Issues in Policy Manager
Bug ID Description
The subscription ID is not retained when you upgrade to CPPM 6.0.2. After you upgrade, you must re-
enter the subscription ID at Administration > Agents and Software Updates > Software Updates.
This is the same subscription ID that was used for 6.0.1, and is required in order to receive software
updates.
Alert messages in the access tracker might be missing for some failed RADIUS authentication requests.
OCSP URLs cannot be accessed through HTTP proxy from CPPM.
Upgrading from previous versions to 6.0.1 will fail if ClearPass Policy Manager is already joined to the
domain.
Workaround: Perform a “leave domain” before starting an upgrade.
If Profile is enabled, cleanup intervals for Known/Unknown/Disabled endpoints in the Cluster Wide
Parameters must not be configured. This is known to cause issues with the cleanup process.
Domain join operations will fail if the domain password contains special characters such as a space,
quotation marks, or a “$” symbol.
10447 Internet Explorer 10 is supported only in compatibility mode. For details, please refer to http://
windows.microsoft.com/en-US/ internet-explorer/products/ie-9/features/compatibility-view.
10881 Entity updates with PostAuth enforcement fail if publisher is down.
11744 Upgrading from 5.2 to 6.x will fail if CPPM is joined to a domain. This issue does not exist for customers
who have installed the latest cumulative patch.
11906 The Aruba dictionary becomes disabled by default after upgrading from Policy Manager 4.x to 6.0.1.
Workaround: Customers who run into this issue must enable the Aruba dictionary manually from the
Administration > Dictionaries page.
12316 Syslog Filters and Data Filters configuration will be removed after an upgrade. Policy Manager does not
carry forward Syslog Filters and Data Filters configuration. Only default data is migrated.
13645 Authorization attributes are not cached for the Okta authentication source.
13781 In the 6.1 release, the default unit for the CRL update interval is now “hours” instead of “days.” When
restoring a 5.x backup on 6.x CPPM, this default unit will update to “hours.”
13999
13975
In order to add or update a PostAuth profile configuration, the admin must first delete old profiles from
CPPM, and then add the new/updated profiles.
14186 PostAuth will fail in MAB flow if a user tries to connect using an endpoint that is UNKNOWN to CPPM.
14190 In order for PostAuth to work in MAC Authentication Bypass (MAB) flow, users must add a new blacklist
repository with a custom filter.
#19288 Symptom: The 6.2.3, 6.2.4, or 6.2.5 patch cannot be uploaded on the Internet Explorer (IE) browser.
Scenario: On Internet Explorer, uploading the patch through the Admin UI fails with the message
“Content-Type “Text/plain” is not supported”.
Workaround: Use the Firefox or Chrome browser instead of IE.