At Cisco TAC's request, we downgraded our client from 4.8.3.3 to v4.8.2.1 with Compliance Module 3.4.19.1 and now have almost instant logins (about 5 secs). So now it looks like we have to have everyone reinstall this older version. Aargh!