If you consider your router to be the first gate in a back-to-back DMZ, then you can use its NAT and protocol filtering to augment ISA's own capabilities. If you just want it to be a simple traffic-passing device, then turn off NAT and any protocol filtering. Personally, I'd opt for door #1 if I had the choice, even though it means more configuration maintenance. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison http://jalojash.org/isatools Read the books! ----- Original Message ----- From: "Glen Howard" <ghoward@xxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, August 09, 2002 11:34 AM Subject: [isalist] USING ISA WITH ROUTER http://www.ISAserver.org Can someone offer guidance on HOW a DSL router should be configured to allow proper "PASS THROUGH" to my ISA server, which will sit right behind it in the enterprise. Do I want the router to be configured to do "router duties", or do I want for it to be configured to be "transparent" and then let ISA do the work? And confirm, NAT should be turned OFF on the router, correct?? Glen Howard II, MCP Systems Administrator ghoward@xxxxxxxx Barnes & Noble.com "If it ain't broke, BREAK IT.. The only thing that is constant is CHANGE" ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')