Hi, Need help and advise please, What is the best way to implement ISA in this given senario. I have 4 locations currently using 4 cisco 1600 routers linked like this xxx.xxx.xxx.xxx/30 serial side then 5 usable public's on the ethernet side xxx.xxx.xxx.xxx/29 it also has a pivate range bound to the ethernet side tunneling all for locations with the private ranges in the 192.168.xxx.xxx there are about 50 computers total the main office has about 30 and the others locations have 8 to 15 all connections are T1. I would like to have all the computers in all locations to have an account on the DC which in not a problem with the current tunnel in place. I did set up ISA 2000 at the corporate office but I can only use the web proxy services by setting the browser to use a proxy. All the client computers need to have the gateway of the router to accesss resources over the tunnel. Is it possible to or better to break the tunnels on the private side of the routers maybe add a third nic to the ISA box and create my own tunnels using isa server? What I need to do is have all for location accessing the internet through their own T1 while routing other traffic over a tunnel. I would appreciate suggestions my current experience with isa server very basic small office one isa 2004 box as the firewall edge with publish services on the lan so this is a huge jump for. This is non - profit organization so they're willing to work with me it's a free for all right now all the computer's are full of spy ware and virus's. Students ar e downloading mp3 files etc etc. Any suggestions will be greatly appreciated Thanks Jim May