Can anyone shed some light on how to allow VNC from the lan to an IPSEC vpn client? I have a firewall rule to allow from our corporate LAN to the VPN clients address space. I also have a NAT rule for this traffic to not be NAT"d for port 5900 which VNC users. In smartlog I can see the packets accepted but it wont make the connection.