R80.40 Identity Awareness Browser-Based auth

[KE]

Hi,

Using Identity Awareness Browser-Based authentication.

Access granted for 1 hour.

Automatic logout enabled (users logged out when they close the browser).

After auth it looks like this (# pdp m):

Next Reauthentication: Thu Aug 27 15:02:28 2020
Next Connectivity Check: Thu Aug 27 14:07:28 2020

Its working fine until I install policy.

After policy install the identities are deleted at the next connectivity check.

Connection persistence setting: Rematch connection

R80.40 ClusterXL

How can I prevent the system from deleting identities after policy install?

Thanx, Endre