secure client multiple authentication popup

[gyovel]

hello

network topology description
There are 3 clusters.
One in between Internet and the main private network
(lets call it FW1) and two others clusters in between
the main private network and 2 secure private nets (lets call them FW2 and FW3).
Centralized management.
each cluster with its own encryption domain.
ClusterXL R61, Management R61, SC R60 HFA01

Whenever users from the main network take their laptop and connect from remote,
they can established a VPN tunnel on one of the two internal clusters (FW2 or FW3) without problem.
But as soon as the tunnel is established, they start to get continuous authentication
popup from the external cluster (FW1).
(only happend to PC's that was connected on the LAN before)

the authentication popup cant be ignored as it remain on top,
workaround was to set local users with static passwords but this is
not a suitable solution (mostly use token for dynamic passwords, and users
for fw2 or fw3 sometimes not in the fw1)

Thanks,
Guy Yovel