Jim, Thanks for your advice, I imagine it must be my configuration, I am currently using SNAT for web & mail. With Kind Regards, Khan ____________________________ Faizal Khan MIS Manager Guyana Forestry Commission 1 Water Street, Kingston, Georgetown, GUYANA. Tel : + (592) 226-7272 Fax : + (592) 226-8956 Email: Forestry.mis@xxxxxxxxxxxxxxxxx Website: http://www.forestry.gov.gy <http://www.forestry.gov.gy/> -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, December 23, 2002 7:16 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Unauthenticated Mails Being Allowed with WINXP http://www.ISAserver.org You'll need to install the FW client on the internal clients to provide per-user rules for non-web access. You may want to reexamine your ISA configuration as well, since it only allows protocols you specifically define. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help / books / articles!