We found that some users with NFA product priviledge "user" can access the NFA Administration page .
New "user" logins have not this access .
if 1 user had access to the administration at 1 time , having the right permissions ,
it keep this access until an IIS recycle ( cache used) .even if we deleted the
start "IISRESET" in a dos box on the NFA console and relogin the user