Dear list, A little while ago I posted a message about my difficulty in getting POP3 and SMTP working from my clients after I had installed ISA 2004 on my test network (home). I have solved it eventually and let this be a lesson to all. I said that the only change was upgrading from ISA 2000 (which worked well and I had become quite adept with). However I had forgotten that at the same time as upgrading the ISA server I had moved DHCP from that box to another (I am only allowed a limited number of servers at home - that old Netfinity masquerading as a coffee table was seen through immediately!). Of course, of course, of course, it's obvious now but I set up the scope options on the new DHCP server to give the default gateway and typed 192.169. I only spotted it by looking really really closely at the ipconfig. This explains why the others server (with fixed IP) could do things the clients couldn't. Anyway, everything now works as I want it to. I can control access in a much more granular way. The miracle thing is that once the Firewall Client or just the web proxy were configured properly they worked for some access - even though I had the DG wrong. So far my verdict is a robust, flexible and powerful product, just don't let it be installed and run by silly operators (myself included!) All the best Andy Fairley