http://blogs.technet.com/b/isablog/archive/2006/01/15/417478.aspxA recent question on the newsgroups made me realize that perhaps the intent behind the system policy rules is not crystal clear. I thought to share my understanding of the system policy rule base (tho’ it should be recognized that intent is in the minden-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/isablog/archive/2006/01/15/417478.aspx#3252225Tue, 09 Jun 2009 04:56:58 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3252225FLV to MP3 Mac<p>When in doubt, use the default settings</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3252225" width="1" height="1">http://blogs.technet.com/b/isablog/archive/2006/01/15/417478.aspx#417658Wed, 18 Jan 2006 16:44:16 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:417658Ori Yosefi - MSFTAs always, the good doctor adds an excellent point: traffic allowed by the system policy is indeed that to or from the Local Host--that is the ISA Server firewall itself.<div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=417658" width="1" height="1">http://blogs.technet.com/b/isablog/archive/2006/01/15/417478.aspx#417524Mon, 16 Jan 2006 18:08:59 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:417524tshinderI always thought of System Policy as controlling key traffic to and from the ISA firewall system *itself*. Thanks! --Tom.<div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=417524" width="1" height="1">