Hi, My Client setup is as follows: internal network - isa 2004 - pix 515e with DMZ - internet. The exchange FE is connected to PIX DMZ and Exchange BE,domain controller,Global Catalog server is at internal network. The clients will access mail from outside using OWA(no pop3,imap,rpc over http). I thought of changing the design by having ISA 2004 as internet firewall and cisco PIX with DMZ as internal firewal. what do you say? Pls advise. cheers, Prashanth