Hi Richard,

Thanks for your respons.

the slow logon issue has been solved with deployed customize CTA package with reduce retry authentication settings from 4 (default value) to smaller value.

I have new problem with validation to external posture server using LanDesk 8.7.

Followed all documentation from Cisco and Landesk did not solved this issue.

attached log from Radius Server.

please advice

regards,

Dony

I'd have a stab and say your LandeskPVS Policy is what's causing RADIUS to say no, but it's down to you to take a look at the rule-set and see what's what.

Failing that, create some obscenely simple policies, and get them working first. Once something very simple works, start to build on it bit-by-bit, continuously testing & fixing as required.

Sorry I can't help more...

Richard.

Hi,

I solve this. You must create group on AD and add to this group both the user and machine.

It works for me. It should take less than 20 sec.

Mugur

Hi Mugur,

We did not use AD as user authentication, but using Cisco ACS internal database. The users working environtment is workgroup.

any suggestion ?

thanks

Dony

Richard,

All rules from internal policy (ACS internal posture) always worked for me, but if I pointing to the external posture server, Radius reject the request or failed in authentication. I'm still looking if my ACS or there is wrong configuration at my LanDesk Server. Btw thanks for the advice.

regards,

bongkie