Hello, I would like to block a portion of a published web site from a certain set of addresses. Say I am publishing http://www.foo.com and I have a folder called restricted that I want to restrict to a certain subnet. How can I go about this? I tried creating an new network set and I added the subnet to it. I then created a deny rule that included this address set in the From as well as /restricted/* in the path name. However the site still displays. Obviously I must be going about this wrong. Can some one help me with this. I would also like to publish a website that requires authentication when accessed from certain network sets but not from others. Is this possible? ISA 2004. Thanks Bill William Holmes (MCP) Department of Computer Science 310 Upson Hall Cornell University Ithaca, NY 14853 wtholmes@xxxxxxxxxxxxxx 607 255-1757 (o) 607 227-6049 (c)