Hi Greg, In fact, I might be needing to sleep off some cerebrations myself :) My laptop is configured as a: FIREWALL and WEB PROXY client. The SecureNAT client is NOT supported when the machine is a VPN client. I'll keep going until the Gray Goose wears off :-) Thanks! Tom -----Original Message----- From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Monday, December 22, 2003 10:02 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA-NAT: Advanced configuration http://www.ISAserver.org You are too "hooked" :) Congrats BTW -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, 23 December 2003 2:55 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA-NAT: Advanced configuration http://www.ISAserver.org Hi Rui, Check out: http://www.tacteam.net/isaserverorg/vpnkitbeta2/vpnfirewallpolicy.htm In fact, I'm using the config right now. I'm sitting here in the Fairmont Hotel in Dallas attempting to have a tenth anniversary celebation with my beloved wife, but as you all know, I'm hooked on ISA and so I'm here with you as Deb sleeps off tonight's cerebrations ;-) I'm connected to an ISA firewall that I've VPN'd to. My laptop here at the hotel is configured as a Firewall and SecureNAT client and split tunneling is disabled. The DNS and WINS servers assigned to the client allow me to connect to all hosts on my office network, and I connect to the Internet via the ISA firewall/VPN server that I'm connected to via the VPN link. The miracle of the Firewall and Web Proxy client config. :) HTH, Tom -----Original Message----- From: Rui Silva [mailto:rui.silva@xxxxxxxxxxx] Sent: Monday, December 22, 2003 10:43 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA-NAT: Advanced configuration http://www.ISAserver.org I have an ISA Server configured as a VPN Gateway. This machine has an external interface with a public IP address and an internal interface with private address. I would like to enable internet conectivity for the VPN clients (all IP traffic, not only HTTP through web proxy). In order to do this I know I have to modify the NAT configuration. Microsoft has an article that explains this procedure for RRAS: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q310888 Does anyone know a similar solution for the ISA Server NAT? txs ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')