Hi Mike, That's expected and what's supposed to happen. Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross Sent: Tuesday, March 21, 2006 11:38 AM To: isalist@xxxxxxxxxxxxx Subject: [ISAserver.org Discussion List] webchaining. Another question. When I watch my logs on the upstream proxy, I see users coming thru with the IP address of the downstream proxy, not of the client they are on. Thoughts?