Nathan, Your ISA box is neither upstream nor downstream because you are installing on the same box. This means, using your example, that your rule would be localhost to external. You are going to have to interpret the instructions to your situation. Amy From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Nathan Sent: Friday, October 12, 2007 12:37 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Help with access rules (no preaching please) Hi, I have a need to install ISA 2006 SE on the same box as Trend Micros IWSS. We don't have enough hardware to install on 2 seperate pieces of hardware. I am having trouble setting this up with either the ISA being an upstream or downstream server. I am not sure which way is best. There are 2 KB articles on the Trend site saying how to install in either situation. ISA upstream http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-126115&id =EN-126115 ISA downstream http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-124425&id =EN-124425 We want ISA to do the authenticating. This is the screen that you edit the IWSS properties I just can't seem to get this to work. Are there any special Access Rules that you need to setup to have IWSS pass traffic to ISA? To have ISA as upstream all the doc above says is to open Internal to External, but this doesn't seem to work. I have tried to find sites with other products that do the same kind of thing, but nothing seems to make this work. We had this working with ISA 2000 but 2006 this is way different. This is a fresh ISA install. All help really appreciated. Thanks Nathan Lara, Vic, Australia