Apologies first as i am a complete newbie to ISA and have been thrown in at the deep end. I know that ISA 2000 has the Socks 4 application filter built in, so theorectically i should just be able to point my internal client at the proxy proxyip:1080 and this will work? The sock filter is enabled on the standard port, there are protocol rules to allow ftp downloads from anyone, site and content rule to anywhere. The firewall client logs shows the connection from proxy server to remote ftp server but it never tries to make the connection! i have checked my firewall and it makes no traffic for that destination. routing is not an issue. The ftp client is configured to use the proxy and i can prove the client by pointing at the old proxy, that runs Proxy2. The message returned from client is Socks: connection rejected or refused. Please help. i dont know how to trouble shoot this! tar very much