I tested v4.9.1.6 with the associated Compliance Module v3.5.771.2 and it took the login time down to 45 seconds, 30 seconds or more faster. Thanks for the tip Jeffery, this helps, but I still need to clip another 20-30 seconds of login time off the whole process. BTW, I'm running 4.8.2 of the server software.
Dan ********************************************** Daniel Albaugh Manager of Network Services Univ. of TN Health Science Center 877 Madison Ave, Room 770 Memphis, TN 38163 ********************************************** On Aug 23, 2012, at 9:57 AM, Jeffrey Thullen wrote: We are testing 4.9.1.6 agent against 4.7.2 server. That combination seems to work within an acceptable time. Our main purpose for that is we do not want to upgrade our CA servers, and we are rolling out ISE for wireless, keeping CA for wired and VPN. That agent, we were told by TAC, will run against both the 4.7.2 CA servers and the new ISE gear. So far so good with it running well against the 4.7.2 servers. On Thu, Aug 23, 2012 at 10:44 AM, Pete Boynton <[email protected]<mailto:[email protected]>> wrote: We are running the 4.9.1.6 agent and just changed users to use a 4.9.1 server and they are complaining it is much slower that the older server that was running 4.7.2 Not too sure what we can do -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Dan Taube Sent: Tuesday, August 21, 2012 6:21 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users No, it was the 4.9.1.6 update from a 4.9.1.5 agent we had before August. -----Original Message----- From: Jeffrey Thullen <[email protected]<mailto:[email protected]>> Sender: Cisco Clean Access Users and Administrators <[email protected]<mailto:[email protected]>> Date: Tue, 21 Aug 2012 17:38:54 To: <[email protected]<mailto:[email protected]>> Reply-to: Cisco Clean Access Users and Administrators <[email protected]<mailto:[email protected]>> Subject: Re: Slow login for Windows users What was the update? Is it a newer agent version than 4.9.1.6? If so, is it acessible on CCO? On Tue, Aug 21, 2012 at 4:59 PM, Dan Taube <[email protected]<mailto:[email protected]>> wrote: TimB - We detected this issue before our start up and did in fact test using the previous 4.8 agent we had and it showed expected authentication times. However, working with Cisco in a TAC they indicated that there was an update to the 4.9.1.6 agent for resolution so we moved forward. In our lab machines we had authentication times around 20 seconds and posture assessment around another 20 seconds, but as students came onto campus we have had reports of up to several minutes. Dan -- Dan Taube Illinois State University On 8/21/12 1:40 PM, Deborah Hovey Boutchyard (dhovey) wrote: My servers are still 4.8.1 - -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Byrnes, Timothy A. Sent: Tuesday, August 21, 2012 2:26 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users Deb Are your servers on 4.9.x, and you're saying that simply using the 4.8.3.3 windows agent solved the issue? TimB -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Deborah Hovey Boutchyard (dhovey) Sent: Tuesday, August 21, 2012 1:49 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users We rolled back the Agent required and that solved the problem for now- we rolled to 4.8.3.3 - Deb UMW -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Bill Blake Sent: Tuesday, August 21, 2012 1:22 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users Are you doing a Windows update check? I have noticed that can cause long logins such as you are describing. I would try disabling it and seeing if it speeds up as a test. -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Byrnes, Timothy A. Sent: Tuesday, August 21, 2012 1:19 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users Any more info on this issue? I haven't heard any complaints here (4.8.2), but I need to upgrade for OSX 10.8 support and am curious if this is limited to 4.9.1 installations. Timothy Byrnes Network Security Engineer Towson University / OTS Desk: 410.704.3813 [email protected]<mailto:[email protected]> -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Kurt Huenemann Sent: Friday, August 17, 2012 4:47 PM To: [email protected]<mailto:[email protected]> Subject: Re: Slow login for Windows users I'm told that we're feeling it here too. FWIW, we're on NAC 4.9.1. Kurt E. Huenemann Assoc. Vice President for Information Resources Heidelberg University 310 East Market Street Tiffin, Ohio 44883 419.448.2351 [email protected]<mailto:[email protected]> Do not ever e-mail your password to anyone. CNIT will never ask for your password in an e-mail. On Fri, Aug 17, 2012 at 2:14 PM, Daniel Albaugh <[email protected]<mailto:[email protected]>> wrote: The last several days our Windows users are complaining of slow NAC agent login. Our Mac users can be logged in through the NAC agent in about 15 secs once they enter their name and password and press return. Our Windows users are taking over 70 seconds to get logged in when they used to take just 15-20 seconds. Any one else suddenly having this issue? Last Tuesday was patch Tuesday for Microsoft (I believe) and maybe there was an update that has affected just our Windows users so I'll have to check into that. At first I thought it might have something to do with being part of our domain but removing a machine from the domain had no effect. Any thoughts are appreciated.
