Sorry, forgot to mention it is 2004. No, we haven't all gone back in time, my ISA is 2004. From: Neil Cassidy Sent: Friday, May 02, 2008 10:23 AM To: isalist@xxxxxxxxxxxxx Subject: IP spoofing and VPN I have a remote VPN client, who keeps showing up as IP spoofing alert in ISA. Is this just because my logging threshold is too low? Is it due to his internal assigned IP not matching his real external IP? Should I be worried? He does keep getting kicked out randomly. Thanks.