I want to setup a third NIC for special protocols and use a dial-up connection. This way all the clients can use this protocol and won't use bandwidth of the T1.

Is this possible, or do I need a second ISA Server, and do some kind of chaining.

You could add a third NIC and make that a DMZ segment. However, access to the DMZ would still be via your primary external connection, which doesn't sound like what you want to do.

We've messed around with multiple external connections on the ISA Server, but I believe its the MS party line that you should have a single external interface on the ISA Server. I suppose it makes sense from a security point of view.

I would set up a second ISA Server to accept your dial-up VPN connections, then you have the best of both worlds. You could even make them members of the same array, and take advantage of the fault tolerance and load balanced caching benefits.

HTH,

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/