Sign in Twice?

[TheHorse13_]

Ever since we applied ESAP 2.1.8, many users have to attempt sign on two times before getting authenticated to the IVE. They enter the correct password and the system comes back with a failed login. They enter the exact same credentials a second time and authentication is successful.

We backed out 2.1.8 but the condition remains. We even updated to 2.1.9 and that too has done nothing. Completely removing the Juniper apps from the host does nothing to solve the issue. We are currently on 7.1R6 but plan to go to 7.1R10 very soon.

Has anyone else seen this behavior?

[SonicBoom_]

all browsers or just IE, have you tried any 7.2Rx releases?

[TheHorse13_]

All browser platforms (that are supported).

Yes, we tried the 7.2X OS builds but found them to be complete junk. We promptly uninstalled them.

[zanyterp_]

I'm sorry you have had such bad luck with the 7.2 series.
This does not sound like anything that has come into us @ JTAC. Does your user access log report both attempts? Do you have any remediation options enabled? What are you checking for? Does it happen with ANY policy or the entire combination of what you are using?

[TheHorse13_]

It happens with all hostchecker policies across all defined roles.

We are upgrading to a new version of the OS in about a week. I will see if the issue remains after that.

No, it does not log the first login failure which leads me to believe that hostchecker is causing the problem. It's a known buggy app and it is our top suspect here.

[zanyterp_]

Ok; host checker would prevent anything tied to a specific user from being logged, depending on how you do it, yes.
Good luck!....hopefully the upgrade goes better for you this time