Figured it out....Secure Access Gateway Settings. It appears a site can only be related to a single AG appliance/FQDN name. My Web Interface site, I was pointing both AG's to, but the site was only configured to be used by the AG1 appliance FQDN. Now I exported that site, created a new, imported the settings to the new site. I altered the groups on the AG2 to point to the new WI site. Only problem remaining, I have the AG groups set to pass through to the WI site, yet the site is still prompting me for credentials. _____ From: Schneider, Chad M Sent: Friday, February 23, 2007 10:08 AM To: 'thin@xxxxxxxxxxxxx' Subject: FW: Access Gateway 4.2 I need to elaborate... Correction, AG 4.5 Advanced, not yet using the AAC. AG1 on subnet A. AG2 on subnet B. Connect to AG1, using the Secure Client, or redirected to the web interface (Same subnet (A)), works great! Connect to AG2, using Secure Client, works fine. Connection is noted on AG2 Remote Monitor. Connect to AG2, redirect to Web Interface (on subnet A) and launch a published application, the Remote monitor on AG1, subnet A, shows the connection. How? Why? How does AG2 even know AG1 exists? Is this being done as AG1 is local subnet to the WI? Even so, how, why? Any help would be appreciated. _____ From: Schneider, Chad M Sent: Friday, February 23, 2007 9:24 AM To: 'thin@xxxxxxxxxxxxx' Subject: Access Gateway 4.2 Something I have found. Access Gateway. If I connect to the Access Gateway VPN (Secure Access Client), I connect to my site2.domain.com. If I connect to site2.domain.com, using the connection to the Web Interface, it connects me to the other appliance we have. I see the 1494 connection on site1.domain.com, using the Access Gateway Admin terminal, remote monitor. What would cause this? Chad Schneider Technology Analyst/Citrix Admin. Bemis Company, Inc. 920-303-7609