First Published: April 27, 2026

Last Updated: October 19, 2026

Passive Identity Agent Release Notes

List of defects fixed in passive identity agent releases.

Defects fixed in Passive Identity Agent, Release 1.1.1

Resolved issues

Caveat ID Number Description

CSCws79909

The passive identity agent 1.1.1 installer now has the Cisco digital signature.

Defects fixed in the Passive Identity Agent, Release 1.1.2

This table provides a list of defects that are fixed in this release.
Table 1. Resolved issues

Caveat ID Number

Description

CSCwu58085

The passive identity agent 1.1.2 recognizes Windows Server 2025 as a supported platform. The agent logs no longer displays the "unsupported OS" error message.

CSCwr98907

With passive identity agent 1.1.2, if the primary Firewall Management Center becomes unreachable and later recovers, the agent automatically retrieves missed user identity sessions from the Active Directory domain controller event viewer. The agent then sends these sessions to the Firewall Management Center once it is back online. The agent accomplishes this process without manual intervention.

CSCwv11579

With this fix the passive identity agent filters out the loopback IP addresses (both IPv4 127.0.0.0/8 and IPv6 ::1) before sending the session data to Firewall Management Center.

CSCwv22338

This fix limits passive identity agent connections to Firewall Management Center to prevent connection exhaustion.

Defects fixed in Passive Identity Agent, Release 1.1.3

This table provides a list of defects that are fixed in this release.
Table 2. Resolved issues

Caveat ID

Description

CSCww55555

Passive Identity Agent installed on a domain controller functions even if NTLM is disabled and Kerberos is enabled.

CSCww06773

To ensure successful configuration of Passive Identity Agent, the system now validates that an agent is selected before saving the configuration.