From: Norwell, MA, USA
Tom, What I am trying to do is have 3 layers of outbound access. The first is supernat with limited access (meaning that the outbound rule applies to all traffic). The 2nd layer is limited outbound access applied to a number of user groups. and the third is full access outbound applied to a specific list of users and groups. So layers 2 and 3 are based on authentication to the firewall by the firewall client. If the firewall client is not loaded then the machine will get access by being a supernat.
So, I am wondering if there are any issues with this configuration.