Two things: 1. never test the ISA external interfaces from behind ISA; it's totally invalid. 2. the fact that ISA logs events is a good thing. If you haven't specifically opened a path through ISA, it shouldn't be open. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help / books / articles! ----- Original Message ----- From: William England To: [ISAserver.org Discussion List] Sent: Tuesday, October 15, 2002 10:17 AM Subject: [isalist] GFI network scanner 3 http://www.ISAserver.org I am trying to use GFI network scanner 3 from an external location to c what ports are open on my ISA servers external interface. As expected the port scan times out and ISA logs various event log warnings. So as to be sure that I don't have any unwanted ports open how can I use this fabulous tool? Can I try it from the internal network and scan the isa external NIc or would this be wrong? William ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')