Field Notice: FN - 63635 - ISE Database Corruption when Google Chrome Is Used with the Administrative User Interface
April 10, 2013
THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.
Initial Public Release
Cisco Identity Services Engine (CISE)
Software Versions 1.1.3 and earlier
Google Chrome is not a supported browser for use with the Administrative User Interface of the Identity Services Engine (ISE), Version 1.1.3 and earlier.
If an authenticated admin user uses Google Chrome to edit the Authorization Policy rules on the policy page, this might result in an incorrect order of policy rules; this incorrect order might impact authorization of end users.
This issue is limited to authenticated admin users with permissions to manage ISE polices. This issue does not apply to end users that use Chrome for web authentication for network access.
In ISE Version 1.1.3 and earlier, use of Google Chrome to edit Authorization Policy rules when 11 or more rules exist might cause the policy rank to be incorrectly reordered. In order to restore the correct order, the Technical Assistance Center must execute SQL scripts on the affected ISE node.
Ordinarily, Authorization Policy rules are in order above the default rule. After the rules are edited and saved, they are out of order and might even be below the default rule.
Do not use Google Chrome with the ISE Administrative User Interface. If you have used Google Chrome and the symptoms described in this field notice are present, contact the Technical Assistance Center in order to correct the order of the Authorization Policy rules on the policy page and correct the associated database.