I thought the Secure Access Suite (SAS) provided endpoint scanning (checking the client for virus scanner etc) before allowing logon. Now reading Citrix I am starting to think only the Secure Access Gateway (SAG) provides this. Can I provide this feature with only SAS? Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA Server+ Senior Network Administrator