I am getting a little confused on my ISA terminology . . . If I want to say: allow ip x.x.x.x from the internet to go through my ISA to x.x.x.x internal ip with this defined protocol is that a destination set? this is NOT http traffic . . . Client sets are only internal, right? Much thanks! Chris