Users are unable to authenticate when using Defender RSA proxy configuration.
The Domain Users group has been added to the "Members" tab for the RSA Access Node.
This will also affect other Windows Primary Groups as Defender does not use the primary group when determining a user's group membership.
1. Remove Domain Users from the "Members" tab of the RSA Proxy Access Node.
2. Restart the Defender Security Server (DSS) service to pick up the configuration change.
1. Remove Domain Users from the "Members" tab and replace this with a specific group that users who should be proxied are a member of.
2. Restart the DSS service to pick up the configuration change.
STATUS: Waiting for fix in future release of Defender.