Recently encountered a DNAC bug that auto updates the ISE trustsec CoA <sendConfigurationToDeviceUsing> field. This essentially defaults any manual configuration when statically assigning a different PSN in an ISE cluster via ISE GUI that you wish to send CoA config from. Unfortunately, after working with TAC there is no fix as of today. The only workaround options include:
-Manually overriding the field again via ISE GUI.
-Use the template editor to push out dynamic-author changes via DNAC provisioning.
See bug here: Bug Search (cisco.com)
This bug is not major as there are workarounds. However, this can be annoying since this can cause CoA failures/alerts in ISE PAN GUI.
