Can FireWall-1 (v3.0) authenticate internal users transparently?

[yny <yny @ nla . gov . au>]

Hi, All

Here is my question :  

Can the FireWall-1 on NT (v4.0) authenticates all internal users
transparently ?

 In other word, all internal users want to access the Internet, they
should be able use existing NT Domain server (Domain-1) to authenticate
them, rather to telnet to the FireWall-1 to be authenticated again ? 

Because the existing Domain server (Domain-1) authenticate each LAN users
every morning; however the Fire-Wall-1 machine has its own domain
(Domain-2).   What should we do to make authentication transparent to our
LAN users ?  (ie. we try to avoid an extra password for FireWall-1
authentication for our LAN users).

Thanks

Yinan