First, you need to make sure you have your client sets configured properly when using SNAT. The client set, and what protocol rules it's assigned to will control whether a secure NAT client will be able to get out... Second, when modifying protocol rules, or protocol definitions, you need to stop and restart the firewall service before the changes will take effect. JoeP -----Original Message----- From: Alex Randjelovic [mailto:alex@xxxxxxxx] Sent: Thursday, October 18, 2001 12:23 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SNAT Client http://www.ISAserver.org I have the same problem Alex Randjelovic IT Manager MagiTech Inc. -----Original Message----- From: Chhatwal, Raminder S. [mailto:RChhatwal@xxxxxxxxxxxxxxxxx] Sent: Thursday, October 18, 2001 11:01 AM To: [ISAserver.org Discussion List] Subject: [isalist] SNAT Client http://www.ISAserver.org Hi all, I am unable to stop / restrict traffic using SNAT client. I have this one workstation sitting behind an ISA server connected to the internal interface of the server. The only connection to the outside world for this client machine is through the ISA server. But still I am unable to restrict and open access to a particular application on the outside (external network). I want to be able and give and restrict access to a number of applications on the external network at my will. I have tried protocol definitions and rules, packet filters, but nothing seems to work. Client machine can get to the external application all the time. I cannot seem to restrict the access. Please Help. Thanks Rami ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: alex@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: JoePochedley@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')