This issue occurs because UserID Caching is disabled. This causes some packets to be dropped due to LDAP AD communication timeouts. By default, UserID Caching is disabled in IWSVA.

To address this issue, enable UserID Caching using the steps below:

1. Look for and open the intscan.ini file using a text editor.
2. Look for the following parameter and change its value to "yes" to enable cache.

   enable_ip_user_cache

    
3. Save and close the intscan.ini file.
4. Execute the following commands to restart the HTTP daemon:

   #/etc/iscan/S99ISproxy stop
   #/etc/iscan/S99ISproxy start

If you do not want to enable UserID Caching, you can add the URL(s) to the Global Trusted List to bypass the LDAP authentication when accessing the site. To do this:

1. Log in to the IWSVA web console.
2. Go to HTTP > URL Access Control > Global Trusted URLs
3. Select the Enable Trusted URLs checkbox.
4. Type in the following in the Match field:

   http://www.domain.com/

5. Click Trust to add the URL to the list.
6. Click Save for the changes to take effect.