We need to authenticate multiple users from a pix via a tacacs server,the problem is that PAT is being done on the router in front of the Pix. The result is that the authentication does not work correctly as the pix authenticates on session parameters, it

[admin_2]

Refer to question : We have to authenticate multiple users for web access via the pix , the PAT on the router in front of the seems to bypass the authentication as only the first session is being authenticated. Will moving the PAT to he PIX itself solve this problem ? i.e. Will the pix then identify individual users and authenticate them before doing the PAT?

[#2]

If the router is now on the pix inside or dmz interface, moving the PAT function to the pix will resolve this.