I'm trying to figure out how to block a specific URL on our Webserver. Specifically, our student database uses parameters to access different programs instead of different URLs. For example: http://www.domain.org/database.exe/parameter=A <http://www.domain.org/database.exe/parameter=A> opens one program, while http://www.domain.org/database.exe/parameter=B opens an entirely different program. I want to leave program A accessible from the Internet, but block program B. So, I created a firewall access policy on the ISA server denying access from External networks to a URL set containing http://www.domain.org/database.exe/parameter=B. Is this the best way to do it?