You need to identifiy your interfaces in the WLC as inbound and outbound. I just did a number id ACLs on the WLC for ISE and I had the same problem. Once I added the inbound and outbound life was good. Give that a shot.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin