We have ISA installed (Proxy/firewall) with secureNAT clients. The clients use an application that requires three special ports to be open and listening on the firewall at all times. The ports are 7100,7150 and 7200. I've created a packet filter for these ports (Both directions) and still they are not listening. What else needs to be configured? Also, how can I map these ports so that they have a permanent connection to a server on the internet? Is there a "NATING" feature similar to RRAS within ISA?