I have been wondering the same - in ISE 2.6 patch 7 (which is what I am using) I see this occasionally. There can't be a good reason for this other than a bug, since each TACACS+ packet must come from a valid source IP. It seems to be random. You probably need to open a TAC case
