Having two internet Connections with ISA Server

no any solution for my both questions??????????

Two questions should be just that - two questions. However, as it is Christmas....

Two internet connections is a non starter through ISA - as I say, basic ISA setup guidance notes explain this. The only time two connections can be used is if you were routing traffic out based on IP addresses as you could use the OS routing tables - and you would need a third nic in the ISA. Anything else, forget it.

The second is a no-no also for the same reason. ISA uses the routing tables based on the host OS - it is not a router itself, therefore it cannot send one group of users one way and another group of user a different way - regardless of whether they are authenticated or not.

As Keith has already said you cannot achieve this via ISA. You will need to implement a router infront of the ISA firewall which deals with the load balancing / failover for the 2 internet connections. This type of router will of course require dual wan ports / ATM that supports load balancing / failover.

Regards
Steve

That will not solve the questions. The external router will not know (or care) about which group is making the Internet connection. Routing (by design) is based on layer 3 traffic and will route based upon the target ip address, not the username or mac address of the source.

One way I can think of doing it is via login script (set in AD).  You could use a Kix Script to define a different default gateway for the any users that were domain members.  This is demonstrated here:

http://www.kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=144072&site_id=1#import

That said you would still need an additional ISA box to do this for the 2 separate gateways.

If cost is a prohibitive issue and you want to impose content filtering, then look at (google) Squid/Squidguard/DansGuardian to see what some options are for non AD joined clients.

The other option is to build the second ISA and use Group Policy to specify a Proxy server in the browser settings.  Assuming all users use IE that should work.

Yes, it is standard capability with two ISA's (naturally) because you are setting up two environments, regardless of whether you put them into individual or dual arrays. As long as you are happy to pay for licensing two ISA servers. However, this was not the question asked. Given the environment in place and the approach currently being taken, it cannot be done.

Putting in a different environment, by buying new, additional hardware, software and new licenses etc then frankly, anything can be done.
Keith

true - although it may not have been exactly the question asked - it is a viable and supportable solution to the question asked - as lets face it... there is no solution for him with one ISA server.

Exactly :)