I have a VPN 3005 concentrator configured to for WebVPN access using the Cisco SSL VPN client. The concentrator and SSL client are the latest version. I would like to use external user and group authentication/authorization via Windows 2003 AD domain controller. Is this possible, and if not, what are my options? Do I need to install the IAS service on the domain controller?