Can Pix use NT domain or AD for user authentication?

[cisco]

Can a Pix talk directly to Windows NT Domain or Active Directory for user authentication purposes? In other words can it do it *without* connecting via a RADIUS or TACACS program placed in between (such as Cisco Secure ACS)?

[pmoulay]

Nope. You need some protocols like radius or tacacs+ running on some authentication server (for example, Microsoft IAS)

[cisco]

Many thanks for that info.

[geoffry]

You can use the Internet Authentication Server (RADIUS) that ships with 2000. It will allow you to authenticate only on those services that support challenges, like HTTP, HTTPS, FTP.