We have the same situation here, PIX in front of ISA2000. I think it's great, as mentioned before, security is an approach:-) We use the segment between the pix and ISA as a DMZ with private addresses. What setup where you thinking of ? Met vriendelijke groet, Sebastian van Dijk Systeembeheer email: sebastian.van.dijk@xxxxxxxxxx _____ Van: TRadtke@xxxxxxxxxxxx [mailto:TRadtke@xxxxxxxxxxxx] Verzonden: maandag 25 april 2005 17:07 Aan: [ISAserver.org Discussion List] Onderwerp: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org Since the guy already owns it, why not give him some helpful advise like setting up ACLs to only let in specific traffic he wants, like DNS, SMTP, FTP, etc. Then setup the ISA for application and content filtering for the incoming data on the backend of it. ISA isn't the end all and be all of network security. Security is an approach, not a software or hardware package. -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Sunday, April 24, 2005 7:03 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org Yup, got it in one, The PIX is absolutely useless. S _____ From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx] Sent: Sunday, April 24, 2005 8:42 PM To: ISA Mailing List Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org I need to firewall i your way the PIX will be useless On 4/25/05, Steve Moffat <steve@xxxxxxxxxx> wrote: http://www.ISAserver.org <http://www.isaserver.org/> Use your PIX open port button, and open all incoming and outgoing ports to and from the ISA server. S :))..Throw the pix away, you don't need it. _____ From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx] Sent: Sunday, April 24, 2005 8:33 PM To: ISA Mailing List Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org <http://www.isaserver.org/> Nobody want answer me???????????????????/ On 4/23/05, Zahir Al-Saab <zahir.alsaab@xxxxxxxxx > wrote: http://www.ISAserver.org <http://www.isaserver.org/> HI, I have PIX and ISA2004 I want to configure them as a firewall, PIX in the edge of network and then ISA, would anyone tell me what the proper senario. thanks