Hey Jim, At this point, we just fantasize differently, since my subnet prioritzation thingie *might* work if the branch office wants to use their local ISA firewall instead of the main office ISA firewall for branch office clients, and both clients are in the same domain. I have the site to site VPN lab setup, its just an issue of finding the time to test it out. I bet this will work. I think where we might have a mild division in opinion (since I don't have the facts yet) is whether each interface representing a different ISA firewall Network will provide different information via autodiscovery. I think it does, but I need to cipher that out too. I *think* its working for me now, but I've learned not to believe my eyes when it comes to computers :) BTW -- can't wait 'til you get back home here in Lone Star State. If you're thinking about doing some writing, I'd be really really happy to co-auth with you as many book as you rekon. Thanks! Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Wednesday, June 15, 2005 12:19 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Multiple WPAD's for multiple sites http://www.ISAserver.org Tom and I see this differently (me == no, Tom == yes), but I haven't had a chance to test Tom's theory. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ <http://isaserver.org/Jim_Harrison/> http://isatools.org <http://isatools.org/> Read the help / books / articles! ------------------------------------------------------- ________________________________ From: Steve Lunn [mailto:Steve.Lunn@xxxxxxxxxxxxxxxx] Sent: Wednesday, June 15, 2005 08:19 To: [ISAserver.org Discussion List] Subject: [isalist] Multiple WPAD's for multiple sites http://www.ISAserver.org Tom, Jim et al. I was wondering if you could help me. We have two sites, each has an ISA server (2k on win2k3) and they use a VPN tunnel between them. We've just upgraded to Win XP Pro, and setup a WPAD setting in DNS to point them to the ISA server on our main site, unfortunately this seems to have stopped our branch office people from browsing the internet. Is there anyway I can have multiple WPAD records for each subnet (i.e. office)? Or is there an easier way I'm missing? Regards, Steve Steve Lunn Technical Support Technician - Microsoft MCP engage Mutual Assurance DDI: 01423 855101 Fax: 01423 855181 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. engage Mutual Assurance is a trading name of Homeowners Friendly Society Limited (HFSL), Registered and Incorporated under the Friendly Societies Act 1992, Reg. No. 964F, and its wholly owned subsidiary Homeowners Investment Fund Managers Limited (HIFML), Reg. No. 3224780, HFSL and HIFML are both authorised and regulated by the Financial Services Authority (FSA). HFSL's FSA Register no. is 110072, HIFML's FSA Register no. is 181487. You can check this on the FSA's Register by visiting the FSA's website http://www.fsa.gov.uk/register or by contacting the FSA on 0845 606 1234 Homeowners Investment Funds ICVC is an investment company with variable capital. Registered in England No. IC00044. Homeowners Financial Administration Limited Reg. No. 4301736, Homeowners Membership Services Limited Reg. No. 3091667 and UK Friendly Insurance Services Limited Reg. No. 3088162 are non-regulated limited companies. United Kingdom Civil Service Benefit Society (UKCSBS) and United Kingdom Armed Forces Benefit Society (UKAFBS) are trading styles of Homeowners Friendly Society Limited All registered at Hornbeam Park Avenue, Harrogate. HG2 8XE. Tel: 01423 855000 Web: http://www.engagemutual.com This e-mail is intended only for the person named as recipient. The contents are confidential. If you are not the intended recipient of this e-mail, please notify us as soon as possible and delete it. If you are not the intended recipient of the e-mail, any use by you is prohibited.