[FW1] Security problems (multiple logins) with client authentication

["Tom Hager" <Tom.Hager@FW1-NOSPAMcommcare.ch>]

Hi

We use client authentication to login into the FW-1 gateway to allow several services. The users are stored in a NOVELL NDS LDAP database, and  they are authenticated with username and SecureID over the HTTPS client authentication service.
It works everything fine, but if a user is logged in from a client, he also can login from a different client with the same username / password at the same time ...

There is a parameter "Number of Sessions Allowed", but it doesn't help.

Does somebody know, how to restrict the client authentication, so that a
user can only login from one client at the same time?

Thanks in advance, best regards
Tom



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================