Management Tunnel delays windows login

[itm.b32-team]

Hello and good day,

We have set up a management tunnel and are testing it with both AnyConnect 4.10 and SecureClient 5.1. With both VPN clients, we have noticed that the Windows logon takes significantly longer, up to 5 minutes. We use an ASA with software version 9.18.4.
In comparison, when using Start Before Logon, the subsequent Windows logon is normal and therefore significantly shorter.

What could be the reason for the slow Windows logon when the management tunnel is active?

Thanks for your help

Robert

[Frama Helpdesk]

Hi Robort
Have you found a solution to this problem? We're experiencing the same.
Regards,
Bruno

[balaji.bandi]

Most cases DHCP IP allocation or any antivirus software running - is this for all or only 1 users.

what ASA Code ?

collect the logs from DART and check.

[Frama Helpdesk]

Hi all
It turned out to be a problem with DNSSEC. Without DNSSEC activated for the internal domain, the windows login screen (Ready the press ctrl+alt+delete) appears after 8 seconds from starting up. With DNSSEC activated, it takes up to one minute and more until the login screen appears. We don't know the solution yet and are working on it. Any suggestions and Ideas are welcome;)

Regards,
Bruno