Just an observation: It is truly amazing at how quickly and completely a corrupt rule in SurfControl can bring down an ISA server! All mail to and from this domain is GFI-scanned.