TS published config in this manner: 1) TS config only on the internal NIC -- TS for the ISA server 2) Server publishing rule directed to the internal NIC of the ISA We have several RDP/3389 rules functioning on our array. We did not apply packet filter. IHTH Have fun! greg