Hi ISA Gurus, I always encountered this error when enable Intrusion Detection and the whole ISA Proxy and Firewall will be down or inaccessible. Please advise... The <I>IntraArrayAddress</I> defined on this server is not in the Local Address Table (LAT). For more information about this event, see ISA Server Help. ISA Server detected a spoof attack from Internet Protocol (IP) address 165.212.11.120. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received. If logging for dropped packets is set, you can view details in the packet filter log. The ISA Server services cannot create a packet filter 61.135.131.182. This event occurs when there is a conflict between the Local Address Table (LAT) configuration and the Windows 2000 routing table. Check the routing table and the LAT to find the source of the conflict. best regards, lwloo 2k'3