Hi everybody. I'm trying to find who insite my network use a free mail (like hotmail) to send a mail to mee. If this guy use a machine inside my ISA Server, I think have the internal IP trying to connect hotmail. I have the day and the time, and if I find at my isa logs what IP enter at hotmail.com at this day and time... I find the man. It's correct? But I'm trying to find the log from today in c:\program files\microsoft isa server\isalogs and I just find the last 8 logs. Where's all logs? Why the log from today have incorrect time? Now it's 16:05 and I have connections at 20:30 (for example). ISA Server record the time from local machime? Thanks... Rafael Rodrigues.