I don't really remember the details, I know it was filtered without the proxy though, because that was tested. Now "why" or "how" it was filtered I couldn't tell you, and since I reformatted the server to put ISA2004 on it, I can't go back to see. I do remember that if you didn't have the proxy setup on the workstation, it would prompt you for username/password. -----Original Message----- From: David Farinic [mailto:davidf@xxxxxxx] Sent: Monday, April 04, 2005 09:54 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SurfControl & SNAT http://www.ISAserver.org Yes, it might be a cause, however u can be sure only when developer confirms... Did you test it on ISA2000 with SNAT clients?