Is there a way (didn't see anything in archives or patch-o-matic) that you can make people authenticate to the firewall (iptables/other?) before they can gain any type of internet connection? I recently had a client put in a MS ISA server because we couldn't control access to all ports like ISA can (or so I hear, I don't know much at all about ISA). Thoughts? Any way to use Radius/AD/LEAP technology for this? Thanks! Dan
