I found something else.. It looks like the call processor hands the session off to another IP address on the PBX. It hands off to 10.1.101.12. If I grep those logs I come up with this: Why is that traffic being denied for unrestricted access? [510174]XEROX 2005-06-29 18:32:35 TCP 10.1.20.209:28428 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Establis h 0x0 Unrestricted Internal Access H.323 Protocol 0 0 0 0 16 16 - - rdzek - 184642 8309739 [510194]XEROX 2005-06-29 18:32:35 UDP 10.1.20.209:7476 10.1.101.12:1719 10.1.20.209 VPN Clients Internal Establis h 0x0 Unrestricted Internal Access Unidentified IP Traffic 0 0 0 0 - - - - - - 184642 8309750 [510267]XEROX 2005-06-29 18:32:39 TCP 10.1.20.209:28428 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Terminat e 0x80074e24 Unrestricted Internal Access H.323 Protocol 98 98 47 47 4328 4312 - - rdzek - 184642 8309739 [510280]XEROX 2005-06-29 18:32:40 TCP 10.1.20.209:25213 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Establis h 0x0 Unrestricted Internal Access H.323 Protocol 0 0 0 0 16 16 - - rdzek - 184642 8309782 [510287]XEROX 2005-06-29 18:32:41 TCP 10.1.20.209:28428 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Denied 0xc0040017 - H.323 Protocol 0 0 0 0 - - - - - - 0 0 [510288]XEROX 2005-06-29 18:32:41 TCP 10.1.20.209:28428 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Denied 0xc0040017 - H.323 Protocol 0 0 0 0 - - - - - - 0 0 [510355]XEROX 2005-06-29 18:32:43 TCP 10.1.20.209:25213 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Terminat e 0x80074e24 Unrestricted Internal Access H.323 Protocol 98 98 47 47 3125 3109 - - rdzek - 184642 8309782 [510384]XEROX 2005-06-29 18:32:45 TCP 10.1.20.209:25213 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Denied 0xc0040017 - H.323 Protocol 0 0 0 0 - - - - - - 0 0 [511260]XEROX 2005-06-29 18:33:14 TCP 10.1.20.209:27769 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Establis h 0x0 Unrestricted Internal Access H.323 Protocol 0 0 0 0 - - - - rdzek - 184642 8310241 [511263]XEROX 2005-06-29 18:33:14 TCP 10.1.20.209:27769 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Terminat e 0x80074e24 Unrestricted Internal Access H.323 Protocol 98 98 47 47 156 156 - - rdzek - 184642 8310241 [511277]XEROX 2005-06-29 18:33:15 TCP 10.1.20.209:27769 10.1.101.12:1720 10.1.20.209 VPN Clients Internal Denied 0xc0040017 - H.323 Protocol 0 0 0 0 - - - - - - 0 0 [513706]XEROX 2005-06-29 18:35:23 UDP 10.1.20.209:7476 10.1.101.12:1719 10.1.20.209 VPN Clients Internal Terminat e 0x80074e20 Unrestricted Internal Access Unidentified IP Traffic 2078 2078 3658 3658 168000 168000 - - - - 184642 8309750 -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Wednesday, June 29, 2005 10:53 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: IP Softphone Not Working For VPN Clients http://www.ISAserver.org Can you include a snip from the ISA logs? If ISA is blocking it, it'll show there ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- ________________________________________ From: Ray Dzek [mailto:Ray.Dzek@xxxxxxxxxxxxxxx] Sent: Wednesday, June 29, 2005 10:28 To: [ISAserver.org Discussion List] Subject: [isalist] IP Softphone Not Working For VPN Clients http://www.ISAserver.org http://www.ISAserver.org Hi all, Avaya PBX ISA 2004 We have an Avaya PBX that supports VOIP. We have a softphone client that we can run on our laptops. We can connect to the call server just fine from inside the company. But if you log in from outside with VPN, the connection fails. VPN has been changed to full access to the internal network to see if it made any difference. It does not. The same laptop is being used inside and outside the company for testing. The ISA server is set as the default gateway. The windows XP firewall is turned off. Any clues as to why this would be happening? This application worked fine on ISA 2000. Ray Dzek Network Operations Supervisor Specialized Bicycles 408-782-5420 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=alist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?typeúQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=alist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=alist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?typeúQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=alist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ray.dzek@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx