Here's a nice simple one for somebody - if my W2K3 TS and license server are inside the firewall but the clients are outside, do I need to open a firewall hole to allow clients direct access to the license server, or will they have access via the ICA channel for TS licenses? If so, which ports should I open?