Did an nmap on my ISA server and found this port opened (3372) according to the lists of ports this is use by TIP2 either tcp or udp. What does TIP2 do anyway? To be on the safe side I just created a packet filter blocking both tcp/udp for all remote hosts access. - Joe