Can anyone clarify whether an ISA server array can be set up that is not part of the domain. They are in the DMZ. Do I need to set up a Domain just for these ISA servers? ALSO... Can ISA Server fulfill the following functionality of Surrogate Sockets: Define static mappings through your ISA - either inbound or outbound. Limit by client IP address which clients can connect to each mapping. Can ISA listen for incoming connections on the ISA Server for each mapping defined? Many Thanks