ASA-SSM Locking VPN clients out.

[ddevecka]

Has anyone had issues with S297 / 5.1.6E1 blocking VPN IP's out? Out of the blue my users will checking Email via the VPN and the the IPS will deny the IP address, and lock them out. I have been watching my IPS Event Viewer but am at a lose. I ideas would be a great help.

Thanks,D

[wbreitzke]

The commands in this section enable or disable secure unit authentication and user authentication, and set a user authentication timeout value for VPN hardware clients. They also let you allow Cisco IP phones and LEAP packets to bypass individual user authentication and allow hardware clients using Network Extension Mode to connect.