When using SSL VPN with NAC, we have NAC configured to assess and remediate AV signatures and OS updates with Windows SUS. The issue we have is the lenght of time it takes (never less than 90 seconds) for SUS to complete the assessment of the remote laptop and the WSUS server to respond with either no updates required or a list of update(s) to be downloaded and installed. According to the logs on the laptop, the SUS service assessing its own patches on the laptop is what takes so long to complete. We opened a call with MS and were told it is what it is.
Anyone else run into this? Anyone know of a way to speed up this process? It works great, but users are frustrated and don't like it because it takes a minimum of 2 minutes to connect with SSL VPN because of our NAC requirements.