Hi everyone, I'm having a strange problem with my Exchange 2003 OWA. My setup is the following : Windows 2003 server SP1 with Exchange 2003 SP2 with OWA Windows 2000 server SP4 with ISA 2000 SP2 with FP1 So, my OWA has been working fine for as long as I can remember. The only problem I had was last fall when my certificate expired and I had renew it. But after I did that, no problems. Then, starting about 2 weeks ago, users were getting denied access to the sight. I know that OWA still works because I am able to get to it from inside the network. But whenever an external user tries to get to it, they get the page that says that the site is not available. I have run a packet monitor on the ISA server and watched the traffic from my test client machine and it gets to the ISA's external NIC, but then doesn't get thru. Its like ISA is all of a sudden blocking the traffic. If I look at the IPPxxx log file, I can see that ISA is in fact blocking the traffic : #Software: Microsoft(R) Internet Security and Acceleration Server 2000 #Version: 1.0 #Date: 2006-02-27 00:26:03 #Fields: date time source-ip destination-ip protocol param#1 param#2 filter-rule interface 2006-02-27 21:41:43 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60311 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:41:45 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60312 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:41:47 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60315 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:42:31 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60351 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:42:34 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60352 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:42:36 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60353 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:43:58 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60398 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:44:00 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60402 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:44:03 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60405 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:46:45 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60458 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:46:48 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60460 443 BLOCKED 209.XXX.YYY.TARGET 2006-02-27 21:46:50 209.XXX.YYY.SOURCE 209.XXX.YYY.TARGET Tcp 60461 443 BLOCKED 209.XXX.YYY.TARGET And this is what is so confusing and strange, since I haven't changed anything in my ISA configuration. The last thing I did to the box was to apply the patch for KB911564 which I believe is for a vulnerability in Media player and should have no affect on ISA, at least none that I can find. Does anybody have any suggestions or clues as to what I might try. My next step was to remove the OWA publishing rule and try re-creating it. Thanks Nick