v.2.4.0

11.06.2026

Features and Improvements

  • ISE Permission Presets introduced. A preset defines a matrix of ISE identity group based permissions. Instead of applying permissions on a user-by-user basis, the same preset can be applied to multiple users.
  • LDAP integration extended to include importing LDAP groups.
    • LDAP groups can be mapped to user roles, thus applying user roles to the groups’ members automatically.
    • LDAP groups can be mapped to ISE Permission Presets, thus applying permissions to the groups’ members automatically.
  • LDAP support for sAMAccountName as username added.
  • LDAP import updated to ignore disabled users in AD.

Bug Fixes

  • Checkbox behaviour on ISE Permissions page is broken - fixed.
  • Inconsistent behaviour on browser refresh - fixed.
  • New endpoint search not starting on page one of results - fixed.

Upgrade Notes

  • Ensure that MANAGEMENT_MICROSERVICE_USERNAME and MANAGEMENT_MICROSERVICE_PASSWORD have been added to the ./fastapi/ise_ms/.env file and contain the username and password of a user with the User Admin role. This user should not be used for logging in to the app in the browser.

v.2.3.0

05.05.2026

Features and Improvements

  • User menu created, including username, logout button and version string.
  • Group ID used when opening endpoint groups to ensure accurate results.
  • Internal database load reduced by using Cisco ISE IDs more often in API requests.
  • Rendering of 403 HTTP errors in the frontend improved.

Bug Fixes

  • Endpoint filtering with invalid group ID caused unhandled exception - fixed.

v.2.2.0

01.04.2026

Features and Improvements

  • Cosmetic improvements to frontend.
  • Improved transition effects in data tables when waiting for API responses.
  • Error messages originating from external systems improved and abstracted.

Bug Fixes

  • Excluded groups were still visible in frontend - fixed.
  • Searching and adding endpoints not working from Pending and Error chips - fixed.
  • CSV import error messages not accurately representing case of input data - fixed.
  • Repeatedly opening the same endpoint group resulted in multiple duplicate chips - fixed.
  • Inconsistent behaviour of add button on ISE and LDAP server pages - fixed.

v.2.1.1

11.03.2026

Features

  • Bulk edit and delete of endpoints.
  • Full-text search results open in new chips, allowing multiple searches.
  • LDAP user synchronisation (replacing import behaviour).

Bug Fixes

None

Other

  • Note: Version 2 is a rewrite of version 1.

v.1.1.10

04.09.2025

Features

  • Support SSL verification for ISE Servers.

Bug Fixes

  • Non-admin users didn’t see newly-added ISE servers - fixed.
  • Applying user permissions during the LDAP user import didn’t work when a filter was still applied - fixed.
  • Clearing a user’s permissions didn’t work if all permissions were being removed - fixed.

Other

  • Quarterly update cycle completed (2025 Q3).

v.1.1.9

27.05.2025

Features

  • A fallback mechanism better deals with data inconsistencies between the local database and the Cisco ISE. The fallback applies to “add” and “edit” functionality.
  • Username is case-insensitive when logging in.

Bug Fixes

  • Clicking on the menu item “Endpoints -> Add Endpoint” from the “Update Endpoint” page led to a 500 error - fixed.

Other

  • Quarterly update cycles completed (2024 Q4 and 2025 Q1 & Q2).

v.1.1.8

24.09.2024

Features

  • Endpoints that are already in an identity group excluded from synchronization by the environment variable GROUPS_EXCLUDE_TO_FETCH_ENDPOINTS can be assigned to a new identity group.

Bug Fixes

  • Multiple applications of the filter when assigning Identity-Group accesses for a user overwrite the previous selection - fixed.

Other

  • Quarterly update cycles completed (2024 Q2 and Q3).

v.1.1.7

28.05.2024

Features

  • Added support for LDAPS.
  • Certain identity groups can be defined whose endpoints are excluded from synchronization.
    • This is done via a Django environment variable: GROUPS_EXCLUDE_TO_FETCH_ENDPOINTS.
    • However, endpoints from these Identity-Groups can still be moved to other groups for which the user is authorized (implemented in v.1.1.8).
    • This is intended for identity groups whose endpoints are not intended for MAC-based authentication, e.g., Unknown, Profiled.

Bug Fixes

  • The LDAP connection fails if Base DN consists only of DCs - fixed.
  • Synchronization of the Unknown Identity-Group always ends with a timeout - fixed (also see above).

Other

  • Quarterly update cycle completed (2024 Q1).
  • Whether the certificate provided for LDAPS should be verified against a certification authority (CA) can be controlled via the Django environment variable LDAP_CA_CERT_FILE_VALIDATION (True/False).

v.1.1.6

08.02.2024

Features

  • CSV files are Excel-compatible.
  • CSV import skips lines that do not contain data.
  • CSV import result table uses meaningful colors to better distinguish between successful and unsuccessful lines.
  • The order of LDAP attributes is reflected during user import.
  • The User Management page distinguishes between multiple ADs as import sources.
  • The User Management page can be sorted by ISE server name, group name, RW, RO, or Clear.
  • “Merge identity groups across all ISE servers” is now a system-wide setting and is completely hidden for non-admins.
  • User permissions have also been implemented at the database/API level.
  • The Refresh ISE Data function has been implemented with Websockets to avoid timeouts.

Bug Fixes

  • The database connection always fails after 8 hours of inactivity - fixed.
  • Favicon 404 error - fixed.
  • Line breaks were missing in success and error messages - fixed.
  • Unsaved permission adjustments were discarded when the filter was touched - fixed.
  • The CSV export file included the “Wildcard” asterisk under ISE for endpoints that are present on >1 ISEs instead of when an endpoint is present on all ISEs - fixed.

Other

  • Quarterly update cycle completed (2023 Q4).
  • Docker images are tagged with version numbers.

v.1.1.5b

09.11.2023

Bug Fixes

  • A user with RW permissions on a group did not have those rights when the group was opened via the “Group Search” page (the corresponding edit and delete buttons were missing) - fixed.

v.1.1.5

07.11.2023

Features

  • The naming and wording of UI elements have been improved (menu options better describe their functions). Examples:
    • “Refresh Groups” is now “Refresh Local DB”.
    • “LDAP Users” is now “Import LDAP Users”.
    • The heading on the homepage is “Search Groups” instead of “Welcome”.

Bug Fixes

  • A group might have been duplicated under “Group Ids” when editing an endpoint - fixed.

v.1.1.4

02.11.2023

Features

  • All search and filter inputs are no longer case-sensitive.
  • The “Refresh Groups” button now updates not only the groups but also all endpoints from the configured ISE servers.

Bug Fixes

  • Based on the new finding that all default Identity-Groups always have the same UUID, the editing of such groups and their endpoints has been improved and a 500 error has been fixed.

Other

  • Our internal analysis tool “Dynatrace” can be disabled in the production environment (see Django environment variable USE_DYNATRACE).
  • Please note that no more than 6 hours should pass between regular syncs; otherwise the communication between the backend and the local database will fail. (See Django environment variable ISE_SYNC_INTERVAL).

v.1.1.3

21.09.2023

Features

  • New Favicon / Logo.

Bug Fixes

  • Users could edit endpoints in groups where they only had read permissions - fixed.
  • If an endpoint exists in different ISE groups, only one group was listed in the editing view - fixed.

v.1.1.2

20.09.2023

Bug Fixes

  • Endpoint UUID collisions (duplicate UUIDs in multiple ISEs) no longer cause the entire import to fail. Logging improved.

Other

  • Implementation of an ISE Mock Service for internal development.

v.1.1.1

19.09.2023

Bug Fixes

  • Database migration reviewed; minor database inconsistencies eliminated.

v.1.1.0

14.09.2023

Features

  • Groups that are not present on all ISEs are highlighted with a warning sign.
  • The regular background data synchronization with the ISEs now occurs only twice a day instead of running continuously. The frequency can be adjusted.
  • Version number is displayed in the footer.

Bug Fixes

  • Groups containing a large number of endpoints can be opened (timeout or 500 error fixed).
  • Saving an endpoint change that is in a large group also works (timeout or 500 error fixed).
  • Default groups (such as “Android”) can be opened (500 error fixed).