According to The ISA Server 2000 book "ipsec can only be used to encrypt L2TP traffic using the ISA server machine as the endpoint for a VPN". So I guess I am not actually "tunneling through" ISA server. I want to make ISA Server the endpoint for a VPN I am setting up.