I see that the proper subnets are allowed to talk, but when I turn on ipsec, the sql ports are blocked. Off they are open so it is ipsec for sure. Were do i start with this??? Here are my settings, I can't seem to post a pic, so here is a link... http://www.daoc-links.com/error.bmp blankmonkey

Hi, Try to use this batch file for check http://support.microsoft.com/kb/968872

Thank you for your reply. We are not using the firewall, only IPSec. We have a hardware firewall that a special group monitors. blankmonkey

Does anyone have input on this???? It doesn't work :( do I have the subnets entered wrong? I even turned on the firewall and configured it, and still no go. blankmonkey

Disappointed no one could help on this. If anyone else has this problem, I was unable to fix it, but the firewall being disabled was not a factor. Also opening up the rule to a larger subnet failed. The format of the subnet was correct as 192.168.1.0/24. But I was able to work around the issue by explicitly stating the address.blankmonkey