Identity Awareness sometimes includes @domain

[Keith_Harvey]

Having an odd Identity Awareness issue that I was hoping someone else may have ran into.  The users are being identified correctly, but sometimes they come through as jdoe, and sometimes [email protected]m.  The issue though, is when the "@domain.com" is included, they are not allowed on the rules they are allowed on.

i.e. We have all webmail blocked except for a small user group that is allowed.  jdoe is allowed, jdo[email protected] is not.  Sometimes, ethernet adapter will pass one, and wireless will pass the other... (without reauthing anything)

We only use AD Query for Identity Awareness, running r77.30.

Any help is much appreciated!

[PhoneBoy]

Have you opened a TAC case by chance?

[Keith_Harvey]

I have not yet, it's a finicky issue that I can't always replicate, so thought it would be a good one to ask here!  But that will be my next step..