Hi all, Basically I'm setting up an EBS2008 environment which forces Forefront Threat Management Gateway (new ISA) on me. The TMG box is on 172.20.20.1 and has a second nic out to the world. I also have a Linux box sitting on 172.20.20.2 (along with a heap of other ranges) that is designed to route between VLANS as we have about 6 or 8 VLANS for different test environments etc. Basically what I want to do is go to the TMG box and add a persistent route by: ROUTE ADD 172.20.24.0 MASK 255.255.255.0 172.20.20.2 /p Which should then send all packets destined for 172.20.24.0/255.255.255.0 out via the linux box which can handle things from there (and does quite well). This works on my 2003 environment perfectly but when TMG gets involved it keeps giving me a "Denied Connection" entry in the logs with an "...UNREACHABLE_ADDRESS" error. I can't figure out how to configure TMG/ISA to allow the data through. Can anyone shed some light on the subject for me? Thanks in advance