I have since read the MS article 884496 and tried adding the adapter rather than the subnets. Also, I have added persistent routes to the known subnets. When I add the inside adapter, there are subnets that are external to ISA showing up as belonging to the internal net (10.20.5.x)?? this is the basic outline: NET | PIX (internal 10.20.5.34/27) | ISA (External 10.20.5.33/27)(Internal 10.20.1.41/24) | Local subnet (10.20.1.x/24) | Router (Internal 10.20.1.9/24) | -------------------- | | Remote office 1 Remote Office 2 10.20.2.x/24 10.20.3.x/24 I have added (along with a couple others): route ?p add 10.20.2.0 mask 255.255.255.0 10.20.1.9 metric 1 route ?p add 10.20.3.0 mask 255.255.255.0 10.20.1.9 metric 1