Re: RSA authentication failure Hi all, on the "old" ( R55) cluster there isn't the flag for hide the outgoing traffic with the cluster IP. But i find the solution on the release notes ( as suggested by northlandboy ) that say: "When employing SecurID for authentication, it is recommended to define each cluster member separately on the ACE/Server with its own unique (internal) IP address. In addition, to send packets to the ACE/Server with their unique IP addresses and not the VIP address, edit the file table.def, located in $FWDIR/lib. Change the line starting with no_hide_services_ports to, for example, no_hide_services_ports = {<5500, 17>}, where 5500 is the service port and 17 (UDP) is the protocol." I'm going to test it..... Maurox |