1) ISA is firewall/cache 2) Clients are SNAT 3) Web App req's ports 80 (out) 443 (both) 22222 (both) directions 4) Created packet filters accordingly with only 1 diff, the 22222 I set the remote ip I get website, login, all is well, the session app opens but does connect Ideas??? Jim