Thanks Dipak for your reply.
Both are viable options. I connected SWING directly to EJB Tier .
I am planing to connecing swing through protocol router .But i am not sure how i will met 5 secs requirement.
My assumption,swing client is also internet so ,RMI i have to tunnel over HTTP.which is slower.and if i put web tier in a cluster mode,it will be faster.and maintenance point of view it is also better.is my argument correct.
still I have some confusion on handling security
I am going for decl security handling.
Web based clients can be authenticated by to let the web container (running on the web servers) authenticate the user and then propagate the User Principalto the ejb container (security propagation) and then the ejb container can handle the authentication/authorization portion of it.
In that case for do i have to mention AccountManager Fa�ade ,AccountDAO etc.or just mentioning decl security handling is enough
can i get your email dipak