Hello-- In "Configuring ISA Server 2000," Dr. Shinder writes, regarding configuring a firewall client with a default gateway, "In your production environment, you should not configure your firewall clients with a default gateway." (page 400) Two questions: 1. Why not? 2. What about a few of us in IT who need to be able to ping? Should I configure these machines with a default gateway, or configure them as SecureNAT clients? I guess that's kind of three questions. Oh, well. Thanks, Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Rob Moore, MCSE Network Manager American Friends Service Committee 215-241-7870 rmoore@xxxxxxxx Our greatest glory is not in never failing but in rising every time we fall. --Confucius