You can make a custom packet filter. For example for HTTP you can make it for TCP outbound, the local port should be dynamic and the remote port should be fixed to port 80. Applies to local interfaces on the ISA server and you can even specify it to only allow updates from the GFI site if you want to. Steve -----Original Message----- From: Edward Sullivan [mailto:esullivan@xxxxxxx] Sent: Monday, February 10, 2003 10:43 AM To: [ISAserver.org Discussion List] Subject: [isalist] Cannot access FTP or HTTP from ISA Server http://www.ISAserver.org Without going into the lengthy details, we use ISA as our email screener. I am trying to enable GFI MailSecurity to allow for FTP updates from the ISA server which GFI is installed on. I have general protocol rules setup to allow for access to FTP and HTTP, with no restrictions for client address sets (yet). If I configure my workstation to use the ISA server as a proxy, I can get out via http and ftp just fine. If I try to access http or ftp sites directly from the ISA server, I get timeouts and cannot connect. I am logged on as a domain admin on both boxes. Any ideas on why I can't get out from the ISA server? Ed Sullivan Director of Information Services esullivan@xxxxxxx < mailto:esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> > KMA Direct Communications Confidential and Proprietary ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sherrera@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')