Force http uauth of every Blackberry connecting through BES

Question

Greetings,
We have a BES on site that will allow port 80 access to the Internet for every attached Blackberry. We are using ACS version 3.3 for user authentication.
When a particular user connects to port 80 out over the single BES server - that user is authenticated via ACS. At that point, subsequent users are allowed access without the need to re-authenticate.
Is there anything I can do to force authentication for each Blackberry user access the Internet via the BES?
Thanks.

Answer 1

Http mode lets you enable port on firewall for http transport only. Anyway you have to open this port.
How to avoid using additional port:
1. I've read that configuring forms servlet (requires 9iAS with Apache) instead of forms CGI lets using a single port
2. If you configured Web server on one IP and Forms listener on another IP - both on ports 80. I think it should work but haven't tried it yet.
Both solutions are hard for me - first requires to buy and deploy 9iAS and second requires to have another IP and another certificate (if you want https).