Windows Domain Authentication VPN Client 3.5.1

[sgamer]

I have a W95 workstation using the VPN 3.5.1 client which connects to a PIX with no radius/tacacs authentication. The VPN client brings up a logon window which, if the username/password is typed correctly, all is well. If it's not typed correctly I'm in but without domain authentication.

Is there a way for the PIX/VPN client to validate the authentication and re-prompt for login without radius/tacacs? If not, would radius/tacacs solve this problem?

[smahbub]

When you say “I'm in but without domain authentication” can you actually access network shares and network drives? Have you checked to be sure the tunnel is up when this happens? You should be able to restrict access without AAA but you might need a Cisco engineer to go over your configs.