Not lost; just not tried. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Thursday, October 18, 2007 1:11 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: SCCM and ISA - Worth a shot! Did this Q get hidden within Amy's posts or is it a big fat "don't know"? J From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: 17 October 2007 00:49 To: isapros@xxxxxxxxxxxxx Subject: [isapros] SCCM and ISA - Worth a shot! Hi, Has anyone used ISA with System Centre Configuration Manager (SCCM) yet? Specifically when using Native mode (e.g. full-on PKI mode). The initial documentation is a little patchy and seems to contradict itself between using Web Publishing and Server Publishing when using Internet based clients that cannot back into the CM server. The SCCM documentation talks about lots of perimeter and internet-facing scenarios, but I want to try and use an ISA based model in a similar way to protecting Exchange or SharePoint. A quote from Jim comes to mind "..we don't need no stinking DMZs" Ideally I want to use Web Publishing, but all communications in SCCM utilise client certificate based authentication. Am I right in thinking I can use ISA Web publishing combined with KCD to secure access from CM clients to the CM server? Answers that tell me that I have to use Server Publishing will make me cry, so please be sensitive Thanks in advance... Cheers JJ