I have purchased and SSL subscription with Verisign. My question is, should i put that SSL on the ISA server and then a generated one from exchange to ISA, Or put the SSL on the exchange. Usually i thought best practice was to put the SSL on the Public facing server. I have a Netgear SSL-VPN router and have the DMZ port turned on, the ISA sits in the DMZ. Just thinking out loud and looking for confirmation. I think i should put it on the ISA server

Place the certificate on the Exchange Server and then export the certificate out from IIS and then import it into ISA Server. ISAServer.org has some good articles on the subject: http://www.isaserver.org/articles/exportsslcert.html Thank you Jay