Hi David, NAT-T is only an issue with L2TP/IPSec connections, so something else is going on with the PPTP issues. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: David V. Dellanno [mailto:ddellanno@xxxxxxxxxx] Sent: Tuesday, April 15, 2003 7:07 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Excellent Port on Cisco TCP NAT-T http://www.ISAserver.org http://www.ISAserver.org Hi Tom, For the Cisco 800 DSL router, it doesn't have the vpn option. It is a basic nat router, unless I upgrade it. The only thing you can do is just open tcp ports 1723 and 47 to a internal (vpn incoming call service) w2k box. In this case no ISA Server 2000 is involved just a Cisco 800 DSL router and a Windows 2000 professional with vpn incoming call enabled. We are able to connect using vpn via w2k but xppro fails. Is the TCP NAT-T still the cause of this scenario. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp>