Thanks for repsonding Tom! I did the entires for all networks on the LAT on both ISA Servers. Here's a quick run down on the configs... 172.16.10.0 is Local network, the gateway is 172.16.10.1 (which is the isa's internal) with 255.255.0.0 as subnet. The remote network the id is 172.16.11.0 with a 255.255.0.0 subnet and 172.16.11.1 (the isa server) as the gateway. Would REALLY appreciate your expertise. I know I am doing something wrong here. By the way, your book ROCKS! I work for Mead Corporation and its becoming standard reading for the IT staff! Andrew Myers VPN Incorporated (937) 704-0591 ext. 202