Hi, > thanks for the reply. > does that mean, aaa proxy will have to parse the whole packet and then > decrypt and encrypt all the keys in Access accept again ??? each packet is unique...there isnt a stream open here. alan