Hi Nathan, No reason not to use the PIX if you already bought it. Heck, I have some Linksys, Dlink, and other NAT devices and other things that I already bought, so I use them. You don't need the PIX, since it must providing packet filtering, but if you've already paid for it, might as well go ahead and use it! HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Nathan Simpson [mailto:nathan@xxxxxxxxxx] Sent: Saturday, December 04, 2004 12:03 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: ISA behind PIX http://www.ISAserver.org Plenty here will say why use PIX, just use ISA. Only need ISA, only need ISA. Maybe you do only need ISA and maybe you don't. But if you do use a PIX, which we do and maybe plenty of others but they are too afraid to speak up, just set the default gateway of the ISA to your PIX, or your router which has a default gateway of your PIX and away you go. We are using our ISA just for proxy, so we only need the one NICin the ISA server. Then we block all outgoing HTTP/S and FTP on the PIX except for the ISA server. HTH Nathan ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx