Hi Peter, There no need to add addresses to the ISA firewall's external interface. The VPN component will listen on all addresses anyhow, since the VPN "listener" is configured on a per ISA firewall Network basis. HTH< Tom -----Original Message----- From: Peter [mailto:pladd@xxxxxxxx] Sent: Friday, July 08, 2005 2:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN through a PIX to an ISA Server 2004 http://www.ISAserver.org Thank you very much for replying (I really love the book!). I am so close to the solution I can taste it. Are you saying that all I need to do is allow UDP 500 and UDP 4500 from the PIX to the ISA External? Can I "PAT" this or should I bind a secondary IP to the ISA External and NAT that address? Thanks so much. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx
