Hi Adam;

Its a new website that is going over a Citrix server and they asked if I can get to it. I put in the https// address and receive:

page cannot be displayed

I informed the distant end of this and that is when they told me I need to allow the IP and port through my firewall but I thought that if you go from a higher secruity level to a lower you don't need to do so

wgranada;

you are exactly right, however in the event you are using an outbound ACL as well as an inbound you'll have to open it up but normal practice is normally just an inbound ACL on smaller networks. So if that case isn't the case, I would recommend doing a few things to troubleshoot, one being a traceroute to the IP. Ensure your packets aren't getting dropped (however they may and this could be normal - however if it drops at your router then you've got some digging to do). The second and best test is to do a telnet to the IP and port and see if it connects or fails. example from dos: telnet 1.2.3.4 5900 .. so basically with this I am testing to see if port 5900/tcp is open on IP 1.2.3.4.

Hope that helps clear it up. Also if you have a friend that works behind a diff. network you could have him try to see if he can connect. If so then it may be easier to narrow down the source or the problem.