We’re currently experiencing a high volume of support requests, which may result in longer response times — Thank you for your patience and understanding.
Active scanning/alternate credentials does not fully work on non-trusted domains. It was designed to work on trusted domain only. Will be fixed/enhanced in 3.5.1
I'v read in the know bugs topic that there is a hotfix for this issue?