Please help, I've tried to block the .exe file in Blocking file extensions in configure HTTP at the Internet access rule. In additional, I've set forward to upstream server for Trend IWSS server with port 8000. I'm not sure whether forward to upstream server will skip HTTP connection not to filter file extensions? For more information here is the connection flow. client <-> ISA2004 : 8080 ISA2004 <-> IWSS : 8000 IWSS <-> Internet : 80 Thanks Witt