You know, after I sent that message I was thinking about that... I didn't remember it specifically supporting it, but I know it was filtered because I tested it. If I remember right, it was more like "if you want the SurfControl reports to show usernames, you have to use the proxy", or something similar to that. -----Original Message----- From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] Sent: Friday, April 01, 2005 13:25 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SurfControl & SNAT http://www.ISAserver.org The tech informed me that SurfControl never supported SNAT or firewall -- the ISA httpredirect gave the SNAT clients access.