Hi Simon, check out: - http://www.isaserver.org/shinder/tutorials/dmz_scenarios.htm - http://support.microsoft.com/default.aspx?scid=%2Fservicedesks%2Fwebcasts%2F wc110801%2Fwcblurb110801%2Easp In short: in a tri-homed DMZ scenario, ISA is just doing routing and packet filtering between Extenal and DMZ. This is by design. If you want better control use a back-to-back DMZ scenario. Hope this helps, Stefaan -----Original Message----- From: simon_keli@xxxxxxxxxxx [mailto:simon_keli@xxxxxxxxxxx] Sent: zaterdag 23 februari 2002 22:44 To: [ISAserver.org Discussion List] Subject: [isalist] DMZ Query http://www.ISAserver.org Please can someone tell me why NAT is necessary for the internal network and not for the DMZ zone? And, why it is safe to use public IP addresses for servers on the DMZ and not on the internal network? Many thanks, Simon ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: stefaan.pouseele@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')