Tom, Let's forget them, and try to life with it :-) The server in the DMZ is currently running ISA with IWSS from Trend for virus scanning, at the moment the child ISA server in the corpnet is connecting to the IWSS server, which have a connection to the outside. ISA is used on the server in the DMZ for server protection only, the proxy capabilities are not used, IWSS should not have any problems with this configuration. At the moment the firewall service is configured so that all trafic from the ISA in the corpnet have full access to all destinations, with all protocols. The server in the LAN is running SurfControl, but i think that won't keeps me from running FTP sessions, all users need authentication before they can acces the internet, FTP is regulated to. Both servers use the "Edge Firewall" template, the have both one NIC connected, ftp downloads work well with IE, not any other ftp client, i have tested. Arjan > -----Original Message----- > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] > Sent: maandag 18 april 2005 14:28 > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: FTP Connection > > http://www.ISAserver.org > > Hi Arjan, > > I understand, I deal with these "flat earthers" a lot myself :) > > If you remove the ISA firewall in the DMZ, you can use the > back-end ISA firewall for FTP uploads and downloads. > > HTH, > >