Hey guys, What does the ISA brain trust make of this? Is this an ex post factor apologia for a bad design decision made with XP SP2, or a valid rationale for their decision? IPSec NAT-T is not recommended for Windows Server 2003 computers that are behind network address translators: http://support.microsoft.com/default.aspx?scid=kb;en-us;885348 Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls