Can you have one of the users logout (or reboot if you're doing AD SSO), log back in, and then immediately grab the NAC agent logs and send those to me (either upload them here or email me with the address in my profile)?To get the agent logs, go to ...

Those fake interfaces are used for the routing process, so they definitely need to be up and happy From the CAS CLI, could you please get me the outputs of the following commands:ifconfigmore /proc/click/real_routing_table/tableThanks,Lauren

Hi Xavier,Sounds like a loop.  Check the switchports connected to the trusted and untrusted side of the CAS - I'm assuming you've got them set to trunks.  If so, make sure there are no shared VLANs between the two ports, and make sure the native VLAN...

Hi Wyley,What screen does the agent get stuck on?  The full network access screen?  If so, one thing we've seen before is that if you have the "automatically close logoff screen after seconds" (under Device Management > Clean Access > General Setup ...

Hi Daniel,It doesn't look like that's an option in the 4.1.2 line.  You can configure this in 4.1.3 line, however - see the configuration guide here: http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/m_ha.html#wp10402...