Good Day,
Current Setup:
ISE Version 2.2.0.470
Distributed Node Environment (2)
Active Directory Connection to 2 Domains
Currently attempting to add "Groups" under "Identity Management -> External Identity Sources" for Domain #1. When adding via "Select Groups from Directory" I am unable to adjust the name filter to anything other than "*"
At this time my Domain#1 has over 500+ groups and ISE is only able to retrieve 500 groups... I can also add groups via Canonical Group name+ Group SID but I have not been able to easily pull Group SID from AD, I will investigate the second option further if it is determined that Name Filter is broken.
Seems similar to Cisco Bug:"CSCvc62279" although this bug is labeled as fixed... Also worth noting that if I attempt to use the workaround "=" I get an error prompt "The characters '=', '<' or '>' are not permitted in the search filter"
Let me know if you have any questions and I will get back to you as quickly as possible,
Thank you!