Outgoing port 1863 is all that is needed Steve ________________________________ From: Ramdhari, Ravesh [mailto:ravesh@xxxxxxxxxxxxxxxxx] Sent: Wednesday, September 01, 2004 8:27 AM To: Isa Weblist Subject: RE: [isalist] RE: ISA 2000 Cache Mode Please assist. I have tried to tried to set IM to use the internal interface of the pix firewall as the address to route the traffic to. I tested prots 8080, 80 11863, 1863 however non of the works. should I test any of the socks setting? If so what config would I use. -----Original Message----- From: Ramdhari, Ravesh Sent: Wed 9/1/2004 8:34 AM To: [ISAserver.org Discussion List] Cc: Subject: [isalist] RE: ISA 2000 Cache Mode http://www.ISAserver.org Good morning guys. This is where we are. The isa server is installed natted private/public address. If pc's don't use the proxy then they are able to use MSN. All pc's are behind a pix 515 firewall. After chatting to Ricky from ISAserver.org yesterday. He also mentioned that I should bypass the proxy by setting up IM to pass traffic thru to the Pix. I will be testing this today and will send out an update. As per Troy: If it's in Cache only mode, then there isn't a firewall to stop it from Working. I agree the isa server in my opinion should not be blocking this as the server is in Cache mode. However when user browse via the pix they don't have issues. Meaning the pix ports are opened. Still don't understand why it gets blocked. I have an idea that the ISA is designed in a way that if you say "All destinations" then only applies to destinations listed in Protocol definitions. Thank guys for the assistance. Ravesh This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than the recipient named above. Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum IT Solutions disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum IT Solutions or its subsidiaries or affiliates. administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx