Hi Mike, SecureNAT clients should have no problems accessing external FTP sites. Client address sets work fine alongside user/group authentication. Obviously, SecureNAT clients don't support authentication so you need to create the appropriate client address sets. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: ms@xxxxxxxxxxxxxxxxxxxx [mailto:ms@xxxxxxxxxxxxxxxxxxxx] Sent: Thursday, May 16, 2002 11:44 AM To: [ISAserver.org Discussion List] Subject: [isalist] FTP, Socks, Protocol Rules http://www.ISAserver.org Greetings, Why does it appear that it is only possible to get an internal FTP client to work thru Socks when the Protocol Rule applies to Client Address sets, and does NOT work when Users and Groups are specified? Is there anything I'm missing re: this? I don't really want to have to give static IP's to a handful of users just because they need occasional FTP access regards, mike ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')