In checking my CAG, the logs are showing a great number of CGP tunnel entries. We typically had only seen SOCKS connections, only using 1494, and have limited traffic to that tunnel. I am now seeing a number of CGP connections, using the 2598 port. Any idea what is happening? Chad Schneider Technology Analyst/Citrix Admin. Bemis Company, Inc. 920-303-7609