We just got a new SonicWall firewall in our main office; it supports IPsec VPN connectivity via a proprietary client. It's a big hassle to set up the client, and I don't want to set it up on all the machines here that need access to the office network. Instead, I'd like to set up a VPN tunnel between my ISA server and the remote server. AFAICT, ISA doesn't do this directly; it looks like I'd need to publish IPsec through ISA to an RRAS server, then let it do the tunneling. Am I on the right track?