Dear Thomas,
In Internet Explorer, Tools, Internet Options, Connections - you will see a box for Dial-Up and Virtual Private Network Settings - and a box for Local Area Network (LAN) Settings. One refers IE how to connect when a particular dial-up connection is in use, and the other tells IE how to connect when the LAN connection is in use, or so I understand.
Thomas Shinder has quite a good article on this:
http://www.isaserver.org/tutorials/Solving_the_Mystery_of_the_VPNRASWeb_Proxy_Client.htmlHere he describes what the differences between the two.
You'll notice that the first box applies to dial-up connections ONLY.
In our list of dial-up entries over there we have 'sentech' - but NB it's not the 'sentech' that 3DWatch uses, that one is stored in C:\Dokumente....\rasphone.pbk.
Basically, Internet Explorer can be configured to either go through the web proxy running on the machine, or use another route, this other route is STRAIGHT through the firewall, which requires a PACKET FILTER in Microsoft ISA Server. I stand to be corrected, but 3DWatch does not autimatically use IE's proxy settings. So because 3DWatch is also running on the machine, and 3DWatch cannot be configured to use a proxy (possibly a feature in the next version :D) it requires a packet filter too.
To cut a very long story short, I needed to create a Packet Filter on the ISA Firewall which allows HTTPS on port 443 out, so that 3DWatch can communicate with DynDNS.org's Secure Pages.
Just wanted to make a note of this so if others get the same error - they know what to check.
Ciao for now.
ILAN