I've installed a PIX over the weekend. Everything seems to be working pretty good. Except I've noticed that for some reason now a user can get to the internet to browse without having to authenticate into Bordermanager. Before you had to have client trust running or log in though the web.

My work around right now is that I have a group policy that sets their proxy connection to the IP of the BM box and port 8080. But anyone that doesn't log into the network will be able to get out to the internet cause they just get the DHCP and away they go.

Is there a way to make sure all port 80 traffic has to be authenticated to the BM box? Right now it seems to just pass it to the PIX an out it goes.