Hey What is the best setup for testing ISA. If I have the external int connected to my company LAN ie(207.204.5.0 & use router as gateway) and have 1 client connected to the internal interface (192.168.0.0) the only way that I can successfuly TS or VPN to the ISA over the internet is by disabling the internal card. I also have a problem trying to browse the internet from the internal client if RRAS is enabled. Could all these conflicts be a cause of the external interface being connected to a working domain. We,re not sure how else to do it. Ultimitely we want the external int. connected directly to the router, but I can't use this in the testing environment or the LAN will be cut off from the Internet as well as remote clients being cut off form the LAN. We followed John's book to a "T" and could not figure why the above mentioned did not work. It's only when I disconnected the internal card that the TS and VPN worked. Now I think it's a test environment problem. Could anyone please clarify Thanks Mike