Hi Jim If you take a closer look at my mail, you will find that it does infact include a detailed instruction on how to reproduce the problem. :-) My ISA logs shows no Deny entries. (even when I enable logging on the first rule :-)) The same instructions were send to PSS and the problem was reproduced. The product team is in the process of declering this a bug. I just wanted to share the information.