Tom, According to the diagram, ISA checks for Network Rule first then system policy and access rules. If I have a URLset as the destionation Network, how will ISA evalute the traffic? Does it do a reverse lookup on the FQDN, figures out to what Network the IP belongs to and apply the network rule part? I know webproxy doesn't perform reverse lookup for FQDNS, but firewall client does. Thanks Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote: http://www.ISAserver.org Hi Crispin, http://isaserver.org/articles/ISA2004_AccessRules.html HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Crispin Mofya Mupeta [mailto:mupetac@xxxxxxxxxxx] Sent: Tuesday, May 31, 2005 10:08 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Deny Browsing http://www.ISAserver.org Hello, I have tried to create an access rule but I still can't block some users. Please assist me steps how to go about this. Rgds _____________________________________________________ Crispin Mofya Mupeta IT Support National Pension Scheme Authority PO Box 51275 Lusaka Zambia Tel: Cell: +260.97.718505 or 096.822356 Direct: +260.1.226382 General: +260.228054-60 ext 24 -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: 23 May 2005 16:09 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Deny Browsing http://www.ISAserver.org Hi Crispin, Create an Access Rule that blocks a group of users from browsing. HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Crispin Mofya Mupeta [mailto:mupetac@xxxxxxxxxxx] Sent: Monday, May 23, 2005 8:44 AM To: [ISAserver.org Discussion List] Subject: [isalist] Deny Browsing http://www.ISAserver.org Hello, I want to block a group of users from browsing Please assist steps to achieving this Rgds _____________________________________________________ Crispin Mofya Mupeta IT Support National Pension Scheme Authority PO Box 51275 Lusaka Zambia Tel: Cell: +260.97.718505 or 096.822356 Direct: +260.1.226382 General: +260.228054-60 ext 24 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mupetac@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx -- Internal Virus Database is out-of-date. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.11 - Release Date: 16/05/2005 -- Internal Virus Database is out-of-date. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.11 - Release Date: 16/05/2005 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tim724342@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com