I have the exact setup in my network. But I've got a question. Our branch offices are accessable through our internal network, so they don't go through ISA. Is your remote location considered an internal connection or is it a VPN like connection over the Internet. If it's internal, you can just add the NAT'd IP address range to your LAT table. Then the remote office uses the NAT ip address of ISA. Also make sure that port is open if a firewall is in the way.
From: N. Fla
Tom, I would love to do a VPN, unfortunately our WAN providers block the GRE protocol across the WAN. This remote site has a domain WINS server with the appropriate static mappings. It works with an RRAS server performing NAT. Just not when the ISA server is in place with Packet Filtering turned on. This site is external to the ISA, but it part of the domain structure. I would like to be able to add its IP's to the LAT, but I don't think this would work. Would it?
I guess I'm not clear on your configuration. If all the clients are BEHIND the ISA Server, then put them in the LAT. If they are not BEHIND the ISA Server, and can only be accessed via the ISA Server's external interface, then by definition, they cannot be on the LAT, because they are external, not internal, clients.