ISA doesn't, but RRAS packet filtering would. Install RRAS as a LAN router (no NAT!!) and configure the IP filtering there so that LAN A can't see LAN B, but both can see the ISA (should be in a different segment). Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Bjørnar Stensrud" <bjornar.stensrud@xxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, January 30, 2003 04:10 Subject: [isalist] Several internal Zones in one ISA server http://www.ISAserver.org Can I create 2 internal zones on one ISA server and seperate them from each other? I have a small customer with one ISA server. They have two seperate departments located at the same place. They should not have access to each other, but both need internet access. Can I do this with several nettwork cards on one ISA. With larger customers, we sometimes need a lot of segments, and would need even more inernal zones - do ISA support this? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')