I am fairly new at ISA but lemme try to see if I can help. The Packet Filter you setup will allow access to ports 5800 and 5900 through ISA Server's external NIC to the outside world. I think to allow the ports on the internal side you need to setup a protocol rule. For added security I would think that you would ensure the packet filter is only setup to allow 5800 and 5900 to specific destinations so that an intruder couldn't use them for more dubious reasons. Anyway, like I said I am new at this and yes I have your book Tom and I am currently slugging my why through it! M. Scott Goad Director of Software Development Norfox Software Inc. -----Original Message----- From: Joe Brown [mailto:joeb1kenobe@xxxxxxxxxxx] Sent: Wednesday, March 27, 2002 5:21 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VNC http://www.ISAserver.org Thanks to everyone who has helped me. I have gained a little insight on what is going on with my problem. I am trying to use the web page publishing to publish VNC for remote companies. But when I try to connect I am getting NoRouteToHost:Operation Timed Out error. After a little investgating, I have found out that after the initial connection (port 5800), and get the password screen, that the VNC client (web page) changed ports to port 5900. So, the question would be is how can I make this work, if it is possible. I tried creating a Packet Filter to allow port 5900. Port 5900 was then open on the ISA server, but was not fowarding it to the server with VNC installed. Thanks for any help Joe ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mgoad@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')