The only thing I had an issue was I had to sticky (I chose source IP) the connection. One TAM box would start the authentication but it would then jump over to the other and it had no idea about it and would deny it. Putting the sticky in resolved right away.
Hope that helps.
