Can you be more specific about the "denied" statement? Are you logging the "Rule#1" and "Rule#2" fields? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Jason Merrique" <j.merrique@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, June 04, 2004 03:51 Subject: [isalist] Strange "Denied" entries in the log http://www.ISAserver.org Hi All, I hope you can help me out with this. Server running Win2k3, ISA 2004 Beta. Problem is that the log is full of "Denied" entries for a whole range of connections between the Server IP and the Internet. What's bizarre is that none of the entries are being blocked according to a rule - they're being blocked for no apparent reason. The connections are to common IP's like our ISP DNS, and our external website. These are all connections to IP's that should be valid, as there are rules that cater for them. What is even stranger still is that this only seems to happen with a subset of connections. Enough get through (via published rules) to allow the proxy and firewall to work fairly well - although sometimes timeouts do occur. Any ideas? Cheers, Jason ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist