Tom, Unfortunately, we do not control the SNAT clients on the wireless side of the house. The SNAT wireless clients reside in a LATDMZ and are the same as the clients at your local T-Mobile HotSpot site. Unlike the T-Mobile sites, our wireless service is free to the military and civilians visiting our air base library and lodging facilities - authentication not needed. . The wireless service is free, so we blocked porn sites with Surf Control. ISA2k SNAT is great for this configuration. Thanx greg ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, November 09, 2004 8:18 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Physically placing ISA between subnets http://www.ISAserver.org Hi Gregory, Configure the clients as Web Proxy clients and be done with it. HTH< Tom ________________________________ From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] Sent: Monday, November 08, 2004 5:20 PM To: [ISAserver.org Discussion List] Subject: [isalist] Physically placing ISA between subnets http://www.ISAserver.org Jim, Physically placing ISA between our subnets is how our ISA2k is setup. Is the same possible with isa2k4? Our isa2k system is still online to support SNAT clients and route between subnets. Our SNAT clients are all ad-hoc wireless clients (Hotspot clients) need to route to Surf Control. Surf Control 2k4 changed the way it operates - does not intercept SNAT clients on isa2k4. Must I employ a router to get the same functionality I had with ISA2k? I must live with ISA2k until Surf Control cures the SNAT problem. Thanx greg ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Monday, November 08, 2004 8:36 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: dropped undefined traffic via static route with ISA 2004 http://www.ISAserver.org I gave you two options; pick the one that suits you best. You can either use the internal router as the DG for all internal machines (except ISA, of course), or you can create manual routes in teh first-subnet hosts. Either way, stop trying to use ISA as your internal router unless you are willing to physically place it between the subnets. ________________________________ From: harald [mailto:harald.wolf@xxxxxx] Sent: Mon 11/8/2004 12:51 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: dropped undefined traffic via static route with ISA 2004 http://www.ISAserver.org Thanks for your answer but let me explain: My network looks like this: Internet | Linux-FW | | DMZ (10.0.0.x/24) | ISA-Server 2004 (Back-Firewall)= Router = standard gateway | | First Subnet (192.168.x.x/16) | Router | | Second Subnet (192.16.x.x/16) When I want to establish traffic from the first to the second subnet, I need a static route back to the router between first and second subnet at the ISA which is the standard gateway. Because of this fact ISA will be involved in this traffic ... What would you suggest? Thanks Harald ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregory.crockett@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregory.crockett@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx