That's a very logical approach and yes, it will work. Is there something else as part of "B" that may be more useful? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Tuesday, January 10, 2006 10:46 To: [ISAserver.org Discussion List] Subject: [isalist] Blocking a Specific URL http://www.ISAserver.org I'm trying to figure out how to block a specific URL on our Webserver. Specifically, our student database uses parameters to access different programs instead of different URLs. For example: http://www.domain.org/database.exe/parameter=A <http://www.domain.org/database.exe/parameter=A> opens one program, while http://www.domain.org/database.exe/parameter=B opens an entirely different program. I want to leave program A accessible from the Internet, but block program B. So, I created a firewall access policy on the ISA server denying access from External networks to a URL set containing http://www.domain.org/database.exe/parameter=B. Is this the best way to do it? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.