[melipla]

That SR was mainly for thefunkygibbon.

One question, do you have users that don't get reprompted? Can you identify which interface they're authenticating to? (If you turn off IP resolution in the tracker, it should give you the interface IP)

I'm seeing a similar problem with users being reprompted to authenticate to a firewall they're already authenticated to. I've noticed that users were authenticating to any interface on the FW & those that authenticated to the "internal" interfaces appeared to have the reprompting problem more frequently. Forcing secure client to only authenticate to the external IP of the firewall has greatly reduced the number of repromptings but hasn't eliminated the problem.