[FW1] SessionAuth: third party

[Gill <jamgill@FW1-NOSPAMUU.NET>]

SessionAuth can authenticate connections by using user data stored at the
source, the destination, or a third system on the network.

I am trying to authenticate RealAudio connections through the firewall and
have had no luck with partially automatic client authentication (outbound
HTTP rule is also client authenticated) coupled with HTTP resource.

I have stumbled upon the idea that I could install one instance of the
SessionAuth. agent on an internal machine (perhaps even the firewall
itself?) and use that to authenticate users.  My question is this:

When the session authentication agent application is installed on a
workstation it is used to authenticate the (single) local user (normally).
Could a session authentication agent installed on another machine in the
network authenticate multiple (an entire group of) users? Is this possible
and how would such a configuration be implemented?  What kind of
maintenence would be required on the session auth agent machine?

thanks...

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
--gill  | Tatu Ylonen, SSH 1.2.12 README:  "Beware that the most effective
        | way for someone to decrypt your data may be with a rubber hose."



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================