i would have to agree with david, publishing owa and activesync through ISA is the best option. you mentioned iSA earlier, is it already confgiured to publish active sync? when you tried the vpn you mentioned that isa wasnt logging anything. do you have a firewall other than your isa, that could be blocking...