Dan, The guy at Microsoft support said that there are two sessions with a proxy connection like would happen with HTTP, however the connections are made on the networks that are involved and not from Local Host. So in my case it is the Internal and Remote networks. Which means that if I am connecting from the Internal network with the ISA proxy the local host doesn't need access to the Remote network. My definition of proxy in this case is two connection, client to ISA and ISA to web server, not a bridge. -Wayne -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Thursday, April 14, 2005 11:42 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org The ISA server itself is referred to as "Local Host" as far as policies is concerned. If you don't have a policy to allow you to connect from the ISA server to your webserver, you will need to add one. The computers on your internal network probably are contacting the server directly if they are on the same subnet.