The current intranet sight is just a web page that allows users to search a records DB containing real estate info (http://intranet/houses). The users that access this page have only read access to the table containing the info. When the user accesses the page they are prompted for a username and password to access the information (Domain username and password). They now need to be able to access the same info from the internet in the same manner. Only the users that can access the intranet site should be able to access the internet site (www.sonoma.com/houses) and the SQL data. Would the web server in the PIX DMZ point to the ISA server as the location of the SQL DB, and then forward the request to the SQL server? Thank you for the advice!