Alex, somone with more insight than me might know of the way to do it. I was always under the impression that the firewall client required user authentication. In which case your remote domain user accounts are unknown (untrusted) by the domain in which the firewall resides. Not to say it can't be done, just not that I am aware of. sorry, I am not much help Thanks, John http://www.accuwired.com