Hello All, I have followed a tech net article.......Configuring IPSec Tunnel Mode VPN Between ISA 2004 and Cisco PIX. All seems to work well as long as the connection is initiated from the subnet the ISA box is hosting . I t seems that a access rule is missing on the Cisco side or something is not configured correctly? Once the connection is initiated and established on the ISA subnet all seems to work. I can access all resources behind the ISA subnet but only once the connection is established behind the ISA. I cannot connect to any resources behind the ISA box from the pix subnet until a connection is initiated behind the ISA subnet first. Can anyone help? James May