Hi
RSA authentication on the appliance happens over RADIUS and there is more scope for "protocol issues" than with the S/W version (which uses an RSA client dll)
Are you seeing excessive amounts of re-tries in any of the RADIUS logs (CSRadius, CSauth external authenticator or RSA RADIUS)
Darran