Al, Yeap, here it is http://www.isaserver.org/tutorials/pubowa2003toc.html How can you tell the certificate is not the same, it should be owa.rtfm-technologies.com. I have checked my forwarding rule and it looks okay. I didn't do the split DNS I opted for the hosts file entry on the isa box and if I ping ow.rtfm-technologies.com then it is resolving to the intemal exchange server. I guess the only this is that I am using SBS2003 but I don't suppose that should make any difference? Steve ________________________________ From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx] Sent: 20 May 2004 17:01 To: [ExchangeList] Subject: [exchangelist] RE: Publishing Exchange 2003 Outlook Web Acces s (O WA) with ISA Server 2000 http://www.MSExchange.org/ Do you have a link to Tom's 5 chapter article? I saw this one http://www.isaserver.org/tutorials/Publishing_Exchange_2000_Outlook_Web_ Access_with_ISA_Server.html but want to be sure it's the same one you used. It *looks* from the logs, like DNS is being blocked by your configuration. But not sure that would give you the results you talk about. I notice that a quick check also shows that your certificate is not the same name as the site (FWIW). Also, the response given back was " 403 Forbidden - The server denies the specified Uniform Resource Locator (URL). Contact the server administrator. (12202) Internet Security and Acceleration Server " That indicates that either no rule set was configured to allow the request or that a rule set was configured to specifically deny the request. Check your rules to be sure they do what you want them to do. Al ________________________________ From: Steve Brand (RTFM Technologies Ltd) [mailto:Steve.Brand@xxxxxxxxxxxxxxxxxxxxx] Sent: Thursday, May 20, 2004 11:07 AM To: [ExchangeList] Subject: [exchangelist] RE: Publishing Exchange 2003 Outlook Web Access (O WA) with ISA Server 2000 http://www.MSExchange.org/ I have setup ISA server as per Tom's 5 chapter article for configuring Exchange 2003 and ISA 2000, when I try and connect to my owa site the below is being blocked by the isa firewall. You can read into it all you like.!!!! :-)