I have noted a problem when configuring SNAT. When I configured the LAT automatically based on the Interfaces from ISA Server it includes the IP from the external interface. It works well for firewall and web proxy clients. The servers and computers from my WAN can access the ISA server as clients too, with no problem. The thing is that with this configuration SNAT doesn´t work. To make SNAT work i have to eliminate the ip address of the external interface of ISA Server from the LAT. And when I do this modification automatically the clients from my WAN can't access the ISA server. They can't see the server even by ping's (it responds time out). (The clients in the LAN still can access the server with no problem). Any idea of this issue?? I think that maybe there is a conflict between the LAT configured in the ISA when i eliminate the IP address from the external interface, and the windows 2000 routing table. Do anyone know how can I edit the windows 2000 routing table, to be the same i have in ISA's LAT? Thanks..