ISE 2.4 LDAP policy breaks after AD group name change.

[Josh Jones]

Recently an Active Directory administrator has renamed a Security Group, say RADIUS_L15 to  RADIUS_LEVEL15 in a windows world this is not a problem as the SID is referenced and the group name updated automatically. However this did not happen and our Policy looking for RADIUS_L15 failed. Has anyone experienced this issue. External identity lookup using LDAP to a Win 2008 R2 functional level AD.

[hslai]

ISE is currently unable to update the name of an AD group automatically. However, the group search should be based on the SID.

If you have a TAC case, please ask TAC to log a bug. Otherwise, please message me your company name and email as a reference for me to file one.