1. Access from where, the Internet? 2. What is the public URL? 3. Through the Comcast connection, you are doing triple NAT to get inside. Why? 4. Load balancing is for outbound. Inbound is determined by IP from which ISP. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: Juan [mailto:becker1@xxxxxxxxxxxxxxxxx] > Sent: Friday, February 04, 2005 4:30 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] 403 Forbidden - (12202) > > http://www.ISAserver.org > Long time lurker on the list. I'm at wits end getting a new ISA server 2000 publishing OWA working. I have attached the network diagram. I have a Symantec Gateway Security 360 load balancing two connections outside of the ISA. For simplicity sake I'm just trying to get it working over HTTP not HTTPS. I can pull up OWA without issue from 172.16.0.3 (between the 360 and outside of ISA), but if I try from the other side of the 360 I get the 403. I have the 360 forwarding all HTTP traffic to 172.16.0.2 (outside IP of ISA).