Steve, I was looking over your article on WUS (http://www.isaserver.org/articles/2004su.html), and had a couple of comments... 1. Apparently Microsoft doesn't want a WUSSY server, so they renamed it recently to WSUS (Windows Server Update Services). Not sure if you knew that. 2. I installed the WSUS on the same server I had SUS on before, and it connects fine to the Windows Update servers with no changes. The article I think refers to the ISA server getting updates from WSUS though. Although I have no policies like the one you described in the article, it IS getting updates from the WSUS server just fine, so not sure how it is doing it.