Hi William, You need to allow IP protocol number 47 through the PIX. That's GRE. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: William Robertson [mailto:robertson.william@xxxxxxxxxxxxxx] Sent: Monday, March 24, 2003 7:39 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA VPN behind PIX http://www.ISAserver.org Hi there I know I know, setting up a VPN should be like falling out of a tree.... but I did and now it hurts!!!! I think my problem may be that I've got a PIX firewall in front of my ISA. I have opened TCP and UDP 1723 on my PIX Firewall, and run the VPN Vlient cConnection wizard on my ISA Server, but when I try and establsh a VPN Connection I can establish connection quite quickly but it just times out on the "Verifying Username & Password..." prompt with the error: Disconnected. Error 721: The remote computer did not respond. Does anyone know if I need to open any other special ports on the PIX Firewall (Maybe something like GRE? But what is GRE's Port Number?) Any other ideas you may have regarding the possible connection failure would be greatly appreciated. Cheers William R. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')