Hello evr. I have following problem. I don´t know how can I setup my environment. There is my topology. branch1 --------- ISP router1 -------- internet ------------ISProuter2 -------------ISA server--------branch2 My ISP do VPN between brench1 and branch2 terminated on ISP routers Only user in branch2 are able connect to internet. Users in branch1 should only use "interbranch" communication. Nowadays I´am able ping to branch1 subnet from branch2 but not reverse. In ISA log I see, that ISA drop my ICMP trafic from branch1 to branch2 How I have to setup ISA serverto allow "interbranch" communication ? My ISA have only two interface. When I try to add subnet from branch1 to my LAT the problem is not solved. THX Zdenek P.S. Sorry for my English