If you are concerned that ISA failing will allow routing to your internal nets, then put a filter rule into the router connecting your ISA server to the internet that drops all packets with a destination of the internal network. This should be in the router already as standard practice. You have no choice but to put the persistent routes onto the ISA server. Nathan Bullivant -----Original Message----- From: John Tolmachoff [mailto:jtolmachoff@xxxxxxxxxxxxxxxx] Sent: dinsdag 12 maart 2002 23:42 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Mystery loss on internal gateway on ISA HELP! http://www.ISAserver.org It is my understanding that you do not want to have any persistent routes on the ISA server, or add any routes manually, only letting ISA do the routing. The reason being is that because if the firewall service should fail, you will now be doing simple routing. If the firewall failed, I would want all traffic to stop now. John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA 92835 714-578-7999, ext. 104 jtolmachoff@xxxxxxxxxxxxxxxx www.reliancesoft.com Disclaimer This email is intended only for the use of the person or entity named above and if you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. This prohibition includes reading, printing, copying, re-transmitting, disseminating, storing or in any other way dealing or acting in reliance on the information. If you have received this Email in error, please notify the sender immediately by return email and destroy the original message. Hale School does not represent or warrant that files attached to this email are free from computer viruses or other defects. Any attached files are provided, and may be used, on the basis that the user assumes all responsibility for any loss or damage resulting directly or indirectly from such use.