That's correct. Also, get a second NIC in that ISA firewall. You bought a firewall, not a MS squid server. HTH, Tom Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Federico [mailto:egopfe@xxxxxxxxx] Sent: Thursday, October 13, 2005 4:59 AM To: [ISAserver.org Discussion List] Subject: [isalist] User-Agent: blocking (proxy-cache mode) http://www.ISAserver.org Hi all I'm new to ISA server and I want to reimplement my squid's ACL on my ISA 2004. So, I want to filter users with User-Agent: for first I want that ONLY MSIE useragent can use my cache any other no. Reading isaserver.org documentation I managed out that is possible to "block" specific useragent, not to "ALLOW ONLY useragent" so the first question is: is possible to allow a specific useragent denying any other ? The second question is, when blocking useragents is possible to use wildcards characters such as "*" ? I ask this beacuse MediaPlayer, for example, present itself as NSPlayer/versionnumbers and I want to match NSPlayer/* because in my net there any many WM versions and It's impossible for me to match all of them Thanks in advance, best regards ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx