Yeah, I started to watch it awhile back, but got interrupted. I'll have to dig out that link you sent, I'm pretty sure I saved it. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Friday, April 01, 2005 09:20 To: [ISAserver.org Discussion List] Subject: [isalist] RE: possible fix ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004 http://www.ISAserver.org Hi Dan, Unless you want to allow non-winsock applications access to the Internet, or you have a network with LAN routers, you don't need to configure a default gateway. And even if you have the latter, you don't need to configure your gateways with a route of last resort that sends connections to the Internet. That's one of the beauties of the blended firewall/proxy architecture of the ISA firewall. Microsoft makes extensive use of this ability of winsock and Web proxied connections to make the underlying network and routing infrastructure transparent for Internet client access. I need to do an article about this, but until then, you should check out the Webcast on how Microsoft IT uses ISA. It's a great talk and I guarantee you'll learn a trick or two. HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls