Re: Is this possible? [7:38098]

As far as getting the PIX to prompt for authentication, it can be done, however it needs to be done by a browser (since the browser has the ability to "pop up" a username/password box, but Citrix doesn't have this capability). You can simply have them go to a static web page that you create which

RE: Is this possible? [7:38098]

Yes, you'll need to configure the PIX to use AAA and have it speak Radius or TACACS+ to the ACE server: How to do AAA with the PIX: http://www.cisco.com/warp/public/110/atp52.html Info on Cisco talking to ACE server: http://www.rsasecurity.com/support/guides/imp_pdfs/Cisco_Remote_Access_Serve rs

RE: Is this possible? [7:38098]

If you are running the RADIUS Daemon component on your SecurID server, you could have the Firewall pass the auth. request as a radius request. The radius daemon gets the request and passes it using native SecurID calls to the ACE server, then returns the appropriate response. As far as getting t