Maybe you need to use your 5 IPs in the DMZ and put everything else in the class C. Brian Kelsay >>> Patrick 03/04/04 09:42PM >>> My pix is a 506(?) not the low end, but next one up. It only has internal and external. Rather than try and get it to route and stuff--and possibly expose my internal net, I have my DMZ outside of it. I only have one internal net. The two nets come to play because ISP one gave me 5 ip's and ISP two gave me a whole class-C. Idealy I would like to load balance a little, and of course fail over. I am guessing something to do with adding a matrix on my gateway entrys.