Hi Tom, Have a look at this document from Cisco; http://www.cisco.com/warp/public/707/2000.html Dimiter MCSE [NT4/2000] MCSA MCP Does anyone has experience with PIX and ISA? Here is what I need: I have single ISA protecting a LAN. A remote office has a PIX installed with VPN enabled. A user inside the ISA LAN wants to VPN into the PIX using Cisco VPN software. I have PPTP enabled but I know PIX is using some sort of IPSEC which does not support NAT. Does anyone know what ports/protocols I need to allow in order for my user to VPN successfully into the PIX at the remote location? Thank you, Tom