Hey everyone - I have an external department that needs to access an application on my network. I have had great success setting up VPNs (Thanks to Tom and Debra for the great book) with my ISA server from home, DSL's, etc. My problem with this account is that they are behind a firewall of their own. I do not know what kind of firewall and it is not one that I administer, but they need to open up ports to allow VPN access to my server. The question is what do I tell them to open? Do I need them to open IP Protocol 47 (GRE) and TCP port 1723? Inbound and outbound? I don't want to look like an idiot and tell them to open something they don't need, but I also need to make sure it will work. Thanks in advance, Michael Anderson, MCSE