I know I have beaten the load balancing issue to death. Just one more question. To log by names you must use the Firewall Client or Web Proxy client. Our Cisco SLB switch balances like this : s1 real ip 10.1.1.1 s2 real ip 10.1.1.2 s3 real ip 10.1.1.3 Then the slb switch gives these three ports a virtual ip of 10.1.1.4 and balances traffic across the three. Very similar to W2K nlb. My question is how do you direct traffic to the virtual ip of 10.1.1.4 with the Firewall Client? Thanks Shane