The ISA server itself is referred to as "Local Host" as far as policies is concerned. If you don't have a policy to allow you to connect from the ISA server to your webserver, you will need to add one. The computers on your internal network probably are contacting the server directly if they are on the same subnet. -----Original Message----- From: Wayne Berry [mailto:wayne@xxxxxxxxxx] Sent: Thursday, April 14, 2005 14:00 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Ok, here is a little more information: 1) If I ping 10.0.0.22 from my internal machine it can reach the destination 2) If I ping 10.0.0.22 from my ISA 2004 firewall it says "Negotiating IP Security" 3) If I make the request via SSL to the web server it works, only non-SSL doesn't work. 4) My client is using the ISA 2004 firewall as a gateway (no proxy configured in IE) Is it right to assume that the ISA 2004 firewall is establishing it's own connection to the web server to honor the inside request? What network does it use? The Local? The Internal? The External? Is it right to assume that if I can't access the web server from the ISA 2004 server then my internal machines can't access the web server. The ISA 2004 server is not part of the Domain in the Rack, however I am making anonymous requests to the server. -Wayne