Hi John, Good point. The certificate excahnge may require that you turn off fragment filtering? Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Friday, August 29, 2003 2:17 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Connection Issue http://www.ISAserver.org Over time, various issues have arisen with some sites using SSL that have been confirmed not to be caused by ISA. This primarily comes down to MTU size and/or fragmenting. If this involves Bank of America or DNB or Wells Fargo or Ameritech DSL or PacBell DSL or any PPPoE connection, this may be why. (Those are the ones I personally know of.) John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com