The best place for IDS and virus scanning is behind ISA in any case. The virus scanner may not have access to the traffic while residing on the ISA itself, unless it was specifically written to cooperate with ISA / RRAS. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Mon, 8 Dec 2003 18:50:51 -0700 "Kevin Marsh" <kmarsh@xxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org I am currently installing a isa vpn and want to be able to scan the incoming traffic to stop virus's coming thru the pptp tunnel. Can someone advise where the tunnel terminates in the isa server so I can work out if the virus software needs to be placed on a separate server behind the firewall. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')