Forgive the longevity of this post. We have an ACAS scanner that using a hard coded PIN to scan our network elements. The PIN is then passed to an RSA server via RADIUS. All of the scans to ASR1001-Xs work, but the scans to switches sometimes succeed...