The CAG product is like this, it is pretty flakey across versions. You should be able back up the entire config with the back up function into a single file. Revert the version and restore the config. This is not unusual, this product has had these kind of issues throughout it's liftetime... Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85266 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Chad Schneider (IT) Sent: Wednesday, July 09, 2008 6:22 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] CAG Standard 4.5.7 Further review, Citrix does not report this, but several users have.... Apparently, when using the CAG SSL VPN with IP Pools, firmware 4.5.7, the IP pools do not work as designed. Example, I have a group on CAG2, that gives out .151-.200. It in fact begins handing out IPs starting with .202... On CAG1, we have a different group that hands out .201-.250....so you can see we have an overlap. I changed CAG2 group to .151-.195, rebooted the CAG, yet it still hands out beginning with .202. It is suggest we go back to 4.5.6....but will that blow away my entire config., as I can only find this as an ISO..... Chad Schneider Systems Engineer ThedaCare IT 920-735-7615