Hi Ryan, Firewall policy isn't applied to the internal interfaces of the ISA firewalls, so you probably would not benefit from ISA's method of access control if you need to firewall internal network segments from one another. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Ryan [mailto:rpriest@xxxxxxxxx] Sent: Tuesday, September 09, 2003 11:08 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA and subnets... http://www.ISAserver.org I am just getting started looking into using ISA as a potential FW solution. Someone mentioned to me that you cannot have multiple subnets protected from each other on one or two (load balanced) ISA servers -- you'd have to have a separate ISA server for each subnet. Is this true? I would like to implement a pair of load balanced ISA servers, but as I have 4 subnets that require varying degrees of segregation, I would need 4-8 ISA servers (1-2 per subnet). Will ISA not handle multiple subnets - 1 for each NIC? I have read some MS literature that mentions multi-homming for a DMZ, but does not go beyond 2 subnets. Does anyone have any experience with using 1 ISA server with 3, 4 or more subnets? Any advice is appreciated, thanks. -Ryan ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')