this demo will continue on for TACACS device admin use case and to keep AireOS code available to showcase with ISE until summer 2020 - move to Enterprise & Security Demo which may have both AireOS and IOS-XE controllers
APs that are built into the router will not work with the following (Use an external AP compatible with WLC 8.5 code)
URL based ACLs (used in the SAW demo).
Device Sensor profiling (if you're accessing the network without the endpoint opening an ISE portal (guest for example) then your device will not be able to be profiled utilizing the DHCP/HTTP probes running on the WLC.
SMS issues - 3/1/2020 - seen that Hungary number is not working with SMS this is being investigated if its ISE issue or clickatell SMS provider.
When first connecting a client to the network using the hotspot or guest network (straight MAB), the device will be denied access. When you connect a second time (now the mac address is in the database) it will be successful.
General issues with Android
Android 6+ using EST - Secure Access Wizard doesn't setup rules for this