The opposite of static authentication. In dynamic authentication, the usernames and passcodes for the authentication scheme exist on the authentication server and not on the firewall. Hence, the firewall dynamically (that is, on an "as needed" basis) gets usernames and passcodes for authentication. Dynamic authentication is supported for ACE, Defender (SNK), Radius, CRYPTOCard, TACACS+, and NT Domain.