Whoever is in charge of the ISA UI needs a kick in the junk. You may try this trick at home with caution... Go into your ISA 2004 firewall policies. Pick any policy that is NOT at the top. Move it to the top quickly. As soon as the rule is all the way to the top.. If you are paying very close attention and it is NOT 2AM and you are not trying to listen and understand a engineer on the phone in Europe, you MAY notice the fact that the button under your mouse cursor just changed from the "move the rule up" arrow to the "disable rule" arrow, and you have just now disabled your rule, after you hit apply, because you thought the only thing you were doing was moving the rule, and not turning it off. Ray Dzek Net Ops / Helpdesk Supervisor Specialized Bicycle Components