we have inherited an ISA 2004 SP2 to Draytek 2820 site to site VPN connection from another support company. The site to site would appear to work fine and we can connect from the remote site back to the main site etc. The problem that we have is that need to be able to access a network device at the remote site from the main site and it will not connect. I have tried my laptop from the remote site as well and it would seem that the main site will only ping computers in the remote site with the ISA client installed on them. If i connect my laptop I cannot ping it or browse shares on it or anything from any PC in the main site. However, my laptop will browse back from the remote site to the main server etc. Is this default ISA behaviour or something in that it will only allow clients with the client installed on them to connect to each other or something else? Any help much appreciated as we need to get the network device working ASAP (it is not a computer.) Thanks in advance.