I agree with Jim 100%. :)) FWIW, Win2K and XP auto updating have been prompting about this patch for about 1 1/2 weeks now. Applied it to critical systems right away and others as I can get to them. Once again, keeping up to date is where it is at. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, September 30, 2002 5:43 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Microsoft PPTP VPN vulnerability http://www.ISAserver.org You guys really should subscribe to MS security announcements... ;-) http://www.microsoft.com/technet/security/bulletin/MS02-051.asp Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the books!