Actually, i'm working with FW1 4.1 SP5, (4 NICS) but want to change (expensive). Is ISA Server a valid option to substitute FW1? I only need a Firewall, no proxy, block every packets and protocols I want, assign to internal hosts --> public IP's (NAT) . Also I need logs. Is ISA Server the best choice? TIA