Getting ready to have a T1 installed. Our current 506e seems to be doing fine but is a PITA to get just right for locking VPN/Dial-In users to the local intranet so they can't access the Internet. The new 2620Xm seesm to have the firewalling capability of the 506 but I am wondering if it is more feasible to use ISA 2004 on the VPN machine and sandwich teh 506 behind the 2620 on the other servers. Any thoughts?