I would jump at any chance to put the LAN behind ISA and on a Private IP subnet. When you have to have the LAN with Public IP addresses is when you get to do more work. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: Jason Merrique [mailto:j.merrique@xxxxxxxxxxxxxxx] Sent: Wednesday, June 16, 2004 12:51 AM To: [ISAserver.org Discussion List] Subject: [isalist] Public IP range or Private IP range http://www.ISAserver.org Hi Chaps, We're lucky enough to be on an academic network that has offered us an entire subnet of public IP's. Our setup consists of about 25 desktops, and four servers. I'm agonising whether or not to put the entire network within a Private subnet. My gut says yes as it makes it much easier to hide everything behind our ISA firewall and just publish OWA/RPC over HTTP/SMTP. But I'm wondering, is this possible or even advisable on network that consists entirely of public IP's? I suppose it would require the ISA Firewall to also act as a router. Apologies for any misuse of terminology. Note that our vlan isn't totally exposed to the internet, the University provide basic protection. Though we're meaning to improve this using ISA 2004. Your insight is appreciated, Cheers, Jason ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist