Is Certificate + Username/PWAuthentication Possible?

[speedglide]

I have a client that wants his VPN clients to be required to hold a certificate and a valid account in AD before the VPN is established. Is this possible. I have certificate authentication enabled on the 3005. This works fine, but does not require a username and password, just the password to open the certificate store on the client. How would I add user authentication. I have an 1112 ACS 3.3.

Thanks for any help,

Scott

[mchin345]

The authenticationmay be possible but ACS can not forward/redirect authentication to different databases depending on NAS type/address. It always check ACS database first, then external databases as listed in Unckown User Policy.

Use different names or separate ACS servers .