Hi Ray, Check out the ISA VPN Deployment kti! There is one on the ms.com site, but all the docs are in one humongous file, which I find unusable and it wasn't designed for that. I'll put a up link later today so that you can download individual files. HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Ray Dzek [mailto:Ray.Dzek@xxxxxxxxxxxxxxx] Sent: Friday, June 10, 2005 5:16 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Stangers on my network... and other scary tales. http://www.ISAserver.org Is there a white paper around? Or would I find this in the Shinder ISA Tome of Wisdom? -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Friday, June 10, 2005 1:01 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Stangers on my network... and other scary tales. http://www.ISAserver.org Absolutely. Since VPN clients are a whole different "breed" of ISA client, you can create policies that limit specific users to specific destinations using specific protocols. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ray Dzek [mailto:Ray.Dzek@xxxxxxxxxxxxxxx] Sent: Friday, June 10, 2005 11:55 To: [ISAserver.org Discussion List] Subject: [isalist] Stangers on my network... and other scary tales. http://www.ISAserver.org It was a dark and stormy night when the CIO came to me and said, "We need VPN accounts for the engineers in India working on the new Oracle implementation." We are on 2003 Server and ISA 2004. Is there a way to allow these engineers through into our ISA VPN and only allow them to have access to certain segments of our network? I am thinking maybe I can static assign those logons an IP that is on a separate subnet or something? Any suggestions welcome. They have to have access to our Sun Solaris servers. Ray Dzek Network Operations Supervisor Specialized Bicycles ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ray.dzek@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx