Jay, Thanks for the response. Having never set up proxy before my question is, do I need to set up something on the ISA server before I point the client to it. If so, which one the perimeter server or the DMZ/LAN server. Thanks, Brian -----Original Message----- From: Jay J. Mobley [mailto:jmobley@xxxxxxxxxx] Sent: Tuesday, April 23, 2002 1:52 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN Client cannot access the Internet? http://www.ISAserver.org Brian, Your IP stack does take on a new identity when you are VPN'd in. so once connected, could it be that your Browser then needs to be pointed at the ISA server for proxy service?? thats what I have to do on mine. -Jay Mobley -----Original Message----- From: Brian Hoover [mailto:brianh@xxxxxxxxx] Sent: Tuesday, April 23, 2002 10:47 AM To: [ISAserver.org Discussion List] Subject: [isalist] VPN Client cannot access the Internet?[Jay J. Mobley] http://www.ISAserver.org Many thanks to the contributors to this list and to ISAServer.org. I have set up a lab to simulate an enterprise network with back to back ISA servers. After establishing a VPN tunnel into the network the client can no longer access the Internet. When I do trace route to any site the the astericks come back on the first hop. If I disconnect the VPN connections all is well again. I am using PPTP as I have not set up CertSrv yet. Can anyone explain this behavior? Does the IP stack lock down to point only to the ISA server to protect from the client being hacked and an intruder gaining an autenticated path to the LAN? Thanks, Brian Hoover I.T. Manager Vidar Systems Corporation ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jmobley@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: brianh@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')