I inherited a 4.0 firewall with many rules in which the 'Action' is 'Client Auth'. The user accounts use SecureID, which works.  Problem is that in the logs, when a valid user gets authorized, I see this authoization hit each rule in which there is a client auth action (regardless of src/dest/svc).. Why is this, and which rule did it actually
 hit on?  thanks.