I've been working with the TAC on this issue but thought I'd throw this out there in case anyone else has seen it. We're using NAC VPN SSO with our IPsec and SSL VPN clients. Most of our users do not have a problem, but recently we've had a small number of users who report that the NAC agent checking starts, runs for a few minutes, and then the agent reports the error "Clean Access Server is unavailable on the network. Please contact your administrator." From a CAM perspective, we see the user logged into the temporary role, but then they seem to get stuck there and not get logged into the regular role.
We're running NAC 4.7.2, and the XP laptops with the problem are checked for a registry key, AV and Windows patches via WSUS. Our current agent version is 18.104.22.168.
Thanks for any input you might have.