Hi Tom, I created an ISA server between two nets, and set the two nets all in LAT, so ISA routes IP between two sides. What I want to do is block all IP traffic except for the oracle client and server. I used RRAS packet filters to block all ports except TCP 1521, but oracle client can not communicate with server in the other side. What do you think to prevent the communication? thanks Jeffrey