It will do an adequate job if configured correctly. Yes, you can do what you need with SBS200, and either have at the other offices either W2K and ISA as a stand alone as a firewall VPN endpoint, or another SOHO type firewall at the other offices as the VPN endpoint. However, as Tom pointed out, SBS2000 is not an ideal solution for multiple sites. It is a great solution for a SMB under 50 nodes that are not heavy into databases or use OWA extensively. OWA uses a lot of resources on top of Exchange. If you really want/need SBS2000 to work in this client, you will need a beefy server to handle the features you want. My suggestion, use SBS2000 as the domain server (with beefy hardware) and use another firewall product in front of it, like say a SonicWall SOHO3/25 or /50 and at the other offices use say a TELE3. That way you get your VPN between the three and they are providing the front line defense, and SBS2000 will handle the rest. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Simon Weaver [mailto:Simon.Weaver@xxxxxxxx] Sent: Saturday, June 28, 2003 3:09 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Site Connectivity with ISA / VPN http://www.ISAserver.org Hi Tom Thanks - Yes I do see your point, but some companies look towards SBS2000 as a Single Server Solution - I would agree that a 2nd Server would be good for storage of Data, or even a NAS based Solution! But in teh case of a single server solution, are you saying that ISA would not do an effective job in protecting the data on this server? Just your opinion I would be intersted in Simon Weaver Technical Consultant MCSE+Internet / MCSE Windows 2000 Integrated Solutions Corp. Ltd http://www.iscl.net <http://www.iscl.net/>