Identity Awareness sometimes includes @domain

[Keith_Harvey]

Having an odd Identity Awareness issue that I was hoping someone else may have ran into.  The users are being identified correctly, but sometimes they come through as jdoe, and sometimes jdoe@domain.com.  The issue though, is when the "@domain.com" is included, they are not allowed on the rules they are allowed on.

i.e. We have all webmail blocked except for a small user group that is allowed.  jdoe is allowed, jdoe@domain.com is not.  Sometimes, ethernet adapter will pass one, and wireless will pass the other... (without reauthing anything)

We only use AD Query for Identity Awareness, running r77.30.

Any help is much appreciated!

[PhoneBoy]

Have you opened a TAC case by chance?

[Keith_Harvey]

I have not yet, it's a finicky issue that I can't always replicate, so thought it would be a good one to ask here!  But that will be my next step..