first off all you have to secure the isa server operating system (windows 2000 OS). there is a lot of information about this stuff in the web, some of this sites are: http://www.ccure.org http://www.trustedsystems.com/tss_nsa_guide.htm http://nsa2.www.conxion.com/win2k/ resource information about isa available in http://www.isaserver.org www.microsoft.com/isaserver/partners/solutionproviders.a sp Hans