Thomas: Publishing a web server with the standard ports (80 & SSL 443) is fairly straightforward, however, we presently have a web server (single IP) that we wish to publish through ISA that has multple websites with various non-standard HTTPS ports (i.e., 9000, 9100, 9200, etc.). We are able to access these web sites from behind ISA by creating a tunnel port range (see MS Q283284). This works fine for outgoing requests. Do you have any idea on how we could make this work for incoming requests to our published web server? Bye the way, we scrapped the poor man's DMZ and are using the extra NIC for a separate internal network. This is a real advantage as we can publish our Citrix XP browser on port 80 AND publish a web server at the same time... Thanks! Maurice A. Werner