David, I've been messing around with this for a couple of months now. I have a client who moved to SmartPipes as there VPN provider. They use IPSEC and have provided me a Client to use to connect with. Since I am behind ISA I've not been able to connect from my PC through ISA to my client because NAT and IPSEC do not play well together. What I've had to do was install a second NIC in my PC and disable my local nic and enable my external nic (which has a public IP assigned) this client that was given to me also has BlackIce so I use it as a firewall. Now---- You say that I can VPN from my PC through ISA to my Clients IPSEC server if I encapsulate using UDP? How are you doing this? Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: greg.foulks@xxxxxxxx Voice: 614.318.5036 Fax: 614.318.5005 -----Original Message----- From: David Elmquist [mailto:david@xxxxxxxxxx] Sent: Wednesday, March 20, 2002 5:08 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN to a cisco VPN server that uses ipsec http://www.ISAserver.org Not entirely correct. Client sitting behind a ISA server (being nat'd) is able to connect to a VPN server through IPSEC, encapsulated in UDP. NAT still breaks IPSEC. I use a VPN client configured as described. David Elmquist -----Original Message----- From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] Sent: 20. marts 2002 22:57 To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN to a cisco VPN server that uses ipsec http://www.ISAserver.org So then are you saying that this can be done? Client sitting behind a ISA server (being nat'd) is able to connect to a VPN server through IPSEC? Greg -----Original Message----- From: Carter, Elizabeth [mailto:ecarter@xxxxxxx] Sent: Wednesday, March 20, 2002 2:00 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN to a cisco VPN server that uses ipsec http://www.ISAserver.org See the following site: http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=forum;f=13 And specifically the following threads: http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=13;t=000 326 http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=13;t=000 042 ***************************************** Elizabeth C. Carter Director of Information Technology Virginia Episcopal School 400 VES Road Lynchburg, VA 24503 434-385-3665 office 434-385-3667 fax -----Original Message----- From: skip [mailto:skip@xxxxxxxxxxxxxxxxx] Sent: Wednesday, March 20, 2002 1:12 PM To: [ISAserver.org Discussion List] Subject: [isalist] VPN to a cisco VPN server that uses ipsec http://www.ISAserver.org I have setup ISA server to be able to allow incomming vpn calls and outgoing vpn calls, and it works fine, now i have clients on the internal network that need to vpn into a cisco vpn server on a remote network that uses ipsec. When the client tries to connect to the remote network from behind ISA, it gets all the way to the point where it says "Authenticating", and then it fails. Is there anything i can do on my end to let these clients authenticate with this cisco vpn server. Thanks . ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ecarter@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: greg.foulks@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: greg.foulks@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')