bilbus

Those are all valid SBS 2008 groups.

Is that server a ISA server or something? If not, then no ... if yes then you can make a rule to allow access. But really, there is no point of doing this ...i would remove the server from the routing. There is no point in separating the 2 networks, if you have pcs that can bypass the restrictions. Generally people do this to separate exterior facing servers from the secure inner network ... and will just open a few ports.

no web editions do clustering. Why would you need clustering on a web server? The web edition does NLB, thats what you need. Your backend database server is the one that may need clustering.

sounds like a good way to debug.