Hi Qusai, Enable Rule#1 and Rule#2 in your Web Proxy and Firewall logs and you'll see what Protocol and Site/Content Rules allowed the user requests. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Qusai A. AL Haddad [mailto:qusai@xxxxxxxxxxxxxx] Sent: Tuesday, June 17, 2003 1:21 PM To: [ISAserver.org Discussion List] Subject: [isalist] Blocking MSN http://www.ISAserver.org Dear all I have ISA Server installed in our organization .. I made policy that will block msn, yahoo, icq.. I create the packet filter and it is working fine , I specify the users in the client address set , so I can block for specific users Now some of the block users cannot access the msn,..... and other blocked users can access msn, while they are in the deny list.. Can some one explain to me why ? Regards to all QH