Hi John, (we spoke yesterday..thanks again) Client2 is an internal address (192.168.1.??) Server2 has a USB ADSL Modem (with static IP), therefore only one NIC (192.168.1.1) I do not think ISA is doing NAT (How do I check)? Scenario contractor ahs started in Company 2 and has the Cisco VPN dialer setup on his laptop(PC2). To access his company's system, he needs to get access to Company1/Server 1. Hope this helps. AMIT.....