Issue:
After software upgrade on the FW the VPN session not recieving the right Group-Policy from ISE.
Even when ISE gets all the information of the user from AD (no change here), the authorization policy that was matching before is not matching anymore.
We have 4 lokations all with FTD-FMC and using certificate and radius authentication.
There is one location that have upgrade the firewalls and manager to 7.4.2.1-30 and now the VPN is not working well.
We are having issues when trying to assign a different group policy to a user where the group policy contains a different client profile (XML) to the one used to connect in the first instance.
We think there is a bug in the new software that is preventing the firewall to overwrite the VPN session.
Firewall:
Firepower 2110 with FTD 7.4.2.1
FMC 7.4.2.1.30
