However, ISA still cannot port-map. For example, the cheapest lightweight wannabe firewall will allow traffic to come in to port 4050 on the external interface and redirect it to port 9020 on an internal host IP number. That's one thing that keeps ISA from being "a real firewall" as well. ;) ---orig Subject: RE: Wingate vs. ISA From: "Steve Moffat" <steve@xxxxxxxxxxxxxxxxxxxxxxxxxx> Hi noor ISA is a real firewall, wingate isn't. There should be no difference in speed, if you have ISA set up correctly and your dns is operating correctly. NOTICE: This communication, including attachments, is information that is confidential and may be privileged. It constitutes non public information intended to be conveyed only to the designated recipient(s). If the reader or recipient of this communication is not the intended recipient, an employee or agent of the intended recipient who is responsible for delivering it to the intended recipient, or if you believe that you have received this communication in error, please notify the sender immediately by return email and promptly erase this email including attachments without reading or saving them in any manner. The unauthorized use, dissemination, distribution or reproduction of this email, including attachments, is prohibited and may be unlawful. Receipt by anyone other than the intended recipient(s) is not a waiver of confidentiality or privilege by the sender.