All, I'm not sure this got through the first time so I thought I'd send it again and also submit to isapros. ---------- Forwarded message ---------- From: Jerry Young <jerrygyoungii@xxxxxxxxx> Date: Aug 20, 2008 9:30 AM Subject: ISA Server 2006 VPN Question To: isalist@xxxxxxxxxxxxx All, I've set up a virtual environment on a workstation at my client's location and installed an ISA Server 2006 instance in this virtual environment (Hyper-V for those who are interested). The basic topology of the environment looks like the following: Corporate Network (treating as ISA external) | .---------. | ISA | --- Perimeter Network (treating as ISA perimeter) '---------" | Internal Network (treating as ISA internal) The Corporate Network is the corporate internal network; I'm simply using it as the "Internet" in this case. The setup is working fine and I can VPN into the ISA server from the Corporate Network and access resources on the other two legs. The "problem" is that doing so locks me out of the Corporate Network and I can no longer access those resources (Email, LCS, etc.) while connected. I was wondering if there were a way (aside from allowing traffic from VPN clients to pass through the ISA server to the Corporate Network again) to be able to maintain access to the Corporate Network resources. My client uses an SSL VPN Extender (Cisco) and that seems to work (access to local, home networking resources remains intact even while connected to the Corporate SSL VPN). Thoughts? -- Cordially yours, Jerry G. Young II Microsoft Certified Systems Engineer