| 2/7 | 
 Michael Robinson 
 | 
Two forms.
One is ``client based''.
Connect to port 259 on the firewall:
    michaelrlt$ telnet 10.0.0.1 259
    Trying 10.0.0.1...
    Connected to 10.0.0.1
    Escape character is '^]'.
    Check Point FireWall-1 Client Authentication Server running on firewall
    User: Username
    password: password
    User Username authenticated by FireWall-1 authentication
The other is ``session based'' -- firewall connects to client on port 261.
The same, but backwards.