Jim, We thought about terminating the ssl connection at an other point, before the isa server, there is a pix, which will do the termination of the ssl, and do some token authentication, after that, the trafic goes through http to the isa server. At the moment we are thinking about using scanmanger at the exchange databases for database and smtp traffic scanning. Arjan > Since OWA should be operating over SSL, this makes the virus > scanning nearly irrelevant. > You should investigate a virus tool for the Exch server instead. > GFI rocks, period.