Okay I will give it a try. Thank you so much for your help. I really appreciate it. FYI- The reg fix issue is addressed here if anyone else is looking for it. "http://support.microsoft.com/default.aspx?kbid=885407"; The one to one NAT issue would be a great "fix" for Microsoft. Nonetheless, based on your reasoning in your book and other forums, I think that a Microsoft shop like mine can do better with packet/application filter built to protect Microsfot products. Thus, I am convinced to go with ISA 2004.