Runing a W2k network behind a SonicWall firewall. I need to give access to one machine so this person (consultant) can access this server (finance application server) externally. What is the cheapest, easiest way to do this? I was thinking of enabling Terminal Services on that machine, and then doing a one-to-one NAT on the firewall to the machines internal address. I could then keep the rule disabled except when this consultant needed to work on it, at which point I could enable it until they are done. We have a VPN solution on the SonicWall, but it is a huge pain in the A$$ to set up, so I'd like to stay away from that.....Thanks for any suggestions.