Almost that simple. ISA only allows secureNAT clients to PPTP outbound, so you'll have to meet that requirement first. ISA only supports PPTP VPN from the LAT (no L2TP), so you may run into troubles with that connection. Since secureNAT clients can't be authenticated, it won't be ISA asking for that; just the destinations server. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Dave Arkley" <d.arkley@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, August 24, 2001 2:04 AM Subject: [isalist] ISA, VPN client from another domain http://www.ISAserver.org I often work in two offices, and use my laptop in both. My laptop is configured as a member of a domain at head office, which has a full blown Win2000 setup and a hardware firewall. The other office uses SBS2000 and is protected with ISA server. I want to be able to access resources at head office when I'm in the other office. My laptop is a member of a domain called PIWI-1 at head office, the SBS domain is called Wildair. How to I set up the ISA server to allow VPN traffic from my laptop when I log-on to my laptop with my PIWI-1 userid? I have VPN working when ISA is diabled, so I guess it's a matter of authentication and authorisation. I'm very new to ISA so details would be appreciated. Thanks in advance Dave Arkley ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')