I have one PC that is logging only IP address information on the ISA server. See below ClientIp ClientUsername DestHost URI 174331110 ORANGE_FACT\tima 206.65.174.102 http://206.65.174.102/us.yimg.com/a/1-/flash/promotions/yahoo/051006/70i lt.gif Every other PC is logging the FQDN for desthost and in the URL. Has anyone seen this before? I checked and the user is going to the FQDN not the IP address in the browser. Oh they are setup as Firewall Client and WebProxy client. Tim