I love issues like this... you are all aware of my issues with the CAG, and internet traffic, IP Pool, etc., etc. We had removed IP Pools, as that was apparently not allowing external internet traffic. So, I created a brand new group on the CAG, assigned an IP Pool, default gateway, etc. Now, everything seems to be working as desired. Internet traffic is actually routing through the inside, as we wished it to in the first place. No CLUE what is different in the current groups that had IP Pool, versus the new group with an IP Pool. Next test, turn IP Pool back on for a current group, and test. I sure wish i did not have to reboot the CAG every time I made an IP Pool change. Chad Schneider Systems Engineer ThedaCare IT 920-735-7615