hi evry one, as Jim said This error(403 / 12202) response is related to a rule or a destinbation set. i created a rule in which i allowed all IP traffic for a defined user called 'userISA' and i got the following results: 1. when 'userISA' is configured as proxy client, he can access internet(HTTP,FTP) using proxy ISA server. and his internet activity is only logged in webproxy Logs. i mean its a normal situation. 2. however, when 'userISA' is configured as firewall client, he cannot access internet(HTTP,FTP) using ISA server, and the error(403 / 12202) is displayed. besides, in userISA requests's are logged both in webproxy Logs and in firewall Logs. the difference is in webproxy Logs, in which 'userISA' (using ISA firewall client) is considered as 'anonymous' therefore his requests are all denied. the 'rule#1' and 'rule#2' in webproxy Logs are not specified. i tried to give you more details about this problem. if you have any idea about the cause of this problem concerning ISA firewall Clients, please sent me your response. thank you for your help, Houda