I think your right on it. My client is SNAT/webproxy but I have to turn off my FWclient to vpn out to another network and then have to turn FWclient on in order to ftp. I DESEPRATELY need to read up on Tom's explination of all the ins/outs of the 3 clients.