Thanks Chris, I do have one last question though. Our users that login through VPN receive an ip adress in the range 192.168.245.1 to 192.168.245.254. How should the line $asSubnetList="xxx.xxx.xxx.xxx/255.255.255.0","xxx.xxx.xxx.xxx/255.255.255.0"
read.

Thanks