ISA Initial Setup

[Barnacle]

I am setting up an ISA Server as a firewall/web cache on our single server network. I am putting it on a separate box (with 2 nics) and we want to be able to VPN into it. Currently we have a Cisco router between the internet and the server. It is running NAT, which prevented us from VPN'ing into the network with the current setup.

Which side of the router do I put the new ISA Server on? How would I setup the external interface? Will using Secure Nat with ISA and disabling it in the router give us VPN capabilities?

Thanks!

 

[xmsre]

Which router?

John
MOSMWNMTK

 

[Barnacle]

It's a Cisco 1720. It has one cable running from a T1 jack to a WIC (CSU/DSU) card and another running from the ethernet port to a switch.