Windows GPO download fails during EAP-Chaining user authentication

[dcarrion]

We are experiencing an issue downloading GPO at sites with slower WAN links.  It seems to happen when re-authentication occurs which temporarily drops the network connection whicj kills the download.  Does anyone know if there is a timer or setting that can be adjusted to either hold back the start of the GPO download process or to hold back the AnyConnect client re-authentication?

[hslai]

The reauth timers are usually configured on the network devices and they might allow to be override by the values sent from ISE.

Also, see install mapped drive

[pcarco]

I agree .. Port exceptions may help in this case.

Best regards,

Paul

AC TME

[dcarrion]

I apologize, I forgot to include that these are wireless connections, setting a port exception is not an option for wireless connections.

[hslai]

In that case, the ACL or DACL for machine auth needs to permit such traffic.