Still learning here...just a quick question. Netscreen 5GT and a Win2k AD domain. If I set up a VPN on the Netscreen using Microsoft's IAS service for authentication, a.) will the user be prompted to change his/her password when it expires on the domain? b.) Is this method of VPN authentication secure (are the passwords sent in clear text??)?