ISA 2004 SP1 on Win2003 STD SP1, just activated PPTP VPN through ISA mgmt console, created Access/Allow rule (there are no pre-existing deny rules - except for the default) for all Outbound protocols, From VPN Clients, To All Protected Networks, All users, yet an RDP connection to a server on the LAN is denied (see log below). I can RDP to the ISA server, but just not other servers. The odd part, in the firewall log, the rule column is empty, whereas most denies occurd due to the Default Deny Rule. Any assistance would be much appreciated. <Excuse the line wrap> Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL 192.168.1.130 MS-ISA - TCP - - 1396 0 0 0 0xc0040012 FWX_E_NETWORK_RULES_DENIED 0x0 0x0 Firewall 05/01/2006 1:55:25 PM 192.168.1.253 3389 RDP (Terminal Services) Denied Connection 192.168.1.130 VPN Clients Internal - - 192.168.1.130 MS-ISA - TCP - - 1396 0 0 0 0xc0040012 FWX_E_NETWORK_RULES_DENIED 0x0 0x0 Firewall 05/01/2006 1:55:28 PM 192.168.1.253 3389 RDP (Terminal Services) Denied Connection 192.168.1.130 VPN Clients Internal - -