Thanks a lot for fast responds and great answer. May I can't explain clearly. The layout of network is: The firewall has three network cards: one for internet, second for DMZ and the third for internal network, I try to place the ISA server in DMZ with two legs: one for connect to DMZ switches and other connects to internal switches, but still I can't publish server to outside users. Thanks again.....again