Fully patched Portal Access, working in one profile, does not work in another, almost identical profile.

Client has a APM portal working just fine: the classical configuration, webmail, a couple of internal services, network access. That works a wonder. Now they want a separated profile, just for webma...