INC-2026-02-03: Prevention

Key Lessons

Lesson	Action
Post-upgrade verification	Always verify certificate binding rules after ISE upgrades
Certificate attribute mapping	Document expected CN → AD attribute mappings
Authentication testing	Test EAP-TLS after any policy changes

Lesson

Action

Post-upgrade verification

Always verify certificate binding rules after ISE upgrades

Certificate attribute mapping

Document expected CN → AD attribute mappings

Authentication testing

Test EAP-TLS after any policy changes