Can anyone direct me to the Windows 2000 IPSec snap-in API? I'm assuming here, which may be a stretch, that an API actually exists to configure Win2K IPSec SA's policies etc. Thanks Skye -- Clarity of thought should be accompanied by clarity of technique - Mondriaan Powered by ffwd internet division [ http://www.ffwd.com/ ]