Hi All, We have ISA as firewall in Integrated mode. From last one week we have continuous Port Scan attack on our Network. Though ISA is detecting them all and intimating us about that. Is there anyway by which we can restrict anyone by launching such attacks on our Network. Pls. advice. ISA gives following message: From: Firewall Administrator Sent: Thursday, November 28, 2002 6:52 PM To: xxxxxxxxxxxxx Subject: ISA Server alert: An intrusion was attempted by an external user. ISA Server detected an all port scan attack from Internet Protocol (IP) address xx.xxx.xxx.xxx For more information about this event, see ISA Server Help. Regards, Vinay.