Yes, the user will only need to authenticate once. Once they are in the auth table on the firewall all their access will be provisioned. If you use OAC or Pulse on their desktop they do not need to authenticate at all... Sam. JNCIS-FWV JNCIS-SEC JNCIS-SSL JNCIS-ER ... View more