When ICS is upgraded to 9.1R16 from pre -9.1R16 with PSAM macOS configured then an additional character "^" is sent to the client along with application/destination details as highlighted below.
====
dsAccessService samAM p1956 t8C03 samConfig.cpp:833 - 'samConfig' server config = uninstallMode=no;dnsFiltering=yes;netbios=off;domain_auth=off;dns1=10.168.10.32;dns2=8.8.8.8;domains=desktopqa.com;apps=Safari||||^;dests=WSAM-DENIED-SERVERS--10.168.10.20|*^10.168.8.19|*^10.168.10.17|*^[fd01:2001:366:64::/64]|*^www.amazon.com|*;start_script=;end_script=;enable_logging=0;iezones=0;enable_logupload=0;ipv6_enabled=on;fqdn_precedence=1
====
When the Ivanti Secure Access Client parses the PSAM Config details, the app crashes. The MacOS code is enforcing the proper format of the config sent by the ICS using asserts. In Windows this enforcement is disabled.
Issue is not observed when newly created PSAM configuration is added after the ICS upgrade to 9.1 R16. |
