Tom, In the test environment itself there is no name server and I've got entries in the host file on the web server and ISA server so they can find each other. The external interface of the ISA machine is on a live subnet with DNS and when I use a client on that subnet to try and access the web server, name resolution is working. When the request hits the ISA Server to access a web page on the web server there are three log entries; 1. Access denied by default rule when <client IP> tries to access 192.0.3.29 using HTTP on port 80. Username anonymous, source external and destination local host. 2. Initiated connection from <client IP> to 192.0.3.29 using HTTP on port 80 3. Closed connection from <client IP> to 192.0.3.29 using HTTP on port 80 Thanks JC > Hi J, > Is name resolution failing? Are the requests even hitting the external > interface of the ISA firewall? > > Thanks! > > Tom > www.isaserver.org/shinder > Tom and Deb Shinder's Configuring ISA Server 2004 > http://tinyurl.com/3xqb7 > MVP -- ISA Firewalls > > =20 >