Proxy configuration leads to long CT connection times on some public networks
Customer uses proxy on their LAN systems. When Connect Tunnel is used on public networks, it wants to use that private LAN proxy but they won't be able to reach and users are timing out.
The problem is that an increasing number of ISP's are resolving names that have no resolution to a default site. When the unresolved name does falsely resolve to an IP address, the client then attempts to load the PAC file from the resolved address.
This problem has existed for a while in Asia, but customers are seeing the problem in North America as well.
As a workaround end users has to remove the proxy settings from IE browser when they are roaming.
This issue has been documented in 10.5.x and 10.6.x release notes as well. Engineering will try to fix this issue in next release - 10.6.3.