They call this SecureNET and FWC requests. ISA doesn't see a "URL" in this case, so it can't log it. How WebSense and SurfControl (same thing these days) behave is a separate question. Jim From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Crockett, Gregory Sent: Thursday, June 19, 2008 3:34 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] ISA displaying ip address and not URL in monitor -- only on one subnet ISA 2006 Standard This is an old installation with a new installation of Websense - testing to replace SurfControl. As a result of ISA only displaying the Destination IP address and not the URL, Websense allows all traffic. The subnet (VLAN) in question host unauthenticated WiFi users that sit behind a wireless router. Anyone seen this before? Is it ISA or Websense? All mail to and from this domain is scrutinized by the Scrutinizer.