Homework is done :-) I found a lot DHCP request broadcasts which has been Denied the Connection by the Default rule from the internal network targeting the local host (ISA 2K4). AND netbios broadcasts with the same results. These are OK i think. On the internal network a hardware based DHCP is running (a router). This can handle the Internal IP requests. The netbios name service is used also by several hosts, that is irrelevant too. I want my DHCP installed on the ISA Server to supply IPs for VPN users only to use the benefits of scope options. The strange is that the DHCP scope does not have leases assigned to the RRAS server. So VPN clients cannot get IPs from the defined scope. How could I resolve this? > On 3/7/06, Norbert Horvath <horvath.norbert@xxxxxxxxxxx> wrote: > > The alerts pane is clean. Even no warnings. > > For obvious reasons, you will not see alerts and warnings for every > packet that ISA denies. Time to do some homework (or workwork if this > is your job): > > http://www.isaserver.org/tutorials/Understanding-Monitoring-ISA-2004-Part-2= > .html > > > Unfortunately I am not sure how to get out some useful data from the log. > > Because I do not know what to query for. > > http://www.google.ca/search?hl=3Den&q=3Disa+2004+troubleshooting+and+loggin= > g > > ...D