[harrisi]

Not quite sure what you are referring to. Are you saying that on the security tab the VPN column should be 'any'? Here is an example of what I currently have. I'd like some of the members of vpngroupA to be able to use secureclient (hence the desktop security) and others to be able to use securRemote. Currently secureclient users are fine, but securemote users can only log on...

On the security tab, the rule is:

SOURCE vpngroupA@any
DEST. serverA
VPN remoteaccess
ACTION terminalservices, dns

There is also the corrosponding desktop security policies:

Inbound:
SOURCE DESKTOP SERVICE ACTION
enc-domain vpngroupA@any terminalservices encrypt
any vpngroupA@any any drop

Outbound:
DESKTOP DEST. SERVICE ACTION
vpngroupA@any enc-domain terminalservices encrypt