Don't worry about your English; it's better than my Italian... :-) The kewl thing is that ISA 2004 makes this MUCH easier. If you want to place your web server in a DMZ, then create a routing rule that defines a "routed" relationship between the DMZ and internal networks. Frankly, you don't need to separate your web server like that... ________________________________ From: Luigi Grieco [mailto:shakala@xxxxxxxxxxxxx] Sent: Mon 11/8/2004 3:11 AM To: [ISAserver.org Discussion List] Subject: [isalist] new isa2004 and 3 nic http://www.ISAserver.org Hi. I have to install ISA2004. I have 1 server w2003st and 1 isa2004st. 3nic My idea is: 1 nic to Internet (public ip) 1 nic perimeter (dmz) 172.16.x.y/16 1 nic to domain (lan) 192.168.10.x/24 My domain is 2000 with 1 cluster dc dns exchange and sql 1 fileserver and iis for intranet 1 web and ftp server (to publishing) (some access must be authenticate by active directory and/or sql) 1 dc with dns Is a god idea put the web server in dmz out of domain? Or I can leave it in domain, but different subnet (I have read the article about intra domain communication...)? Any idea is appreciate!!! Sorry for my elementary English, Best regards, gg ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.