I think there's a bit of confusion here. "Direct access" means only that the web client will not make a CERN proxy request. IT will still have to go through ISA if that is the only way to reach that web site. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mayo, Bill Sent: Friday, February 29, 2008 9:41 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Direct Access configuration I have some sites added to the "Directly Access..." list in the web browser tab of our internal network in ISA 2006. I have found a knowledgebase article (http://support.microsoft.com/default.aspx?scid=kb;en-us;920715) that indicates it is necessary to format the addresses there as *.example.com/* when you have some IP addresses listed, as I do. I am having a problem with a domain that I have in the direct access list (formatted as indicated above), and it appears that (at least part of) the problem is that it is being processed by the web proxy. In logging, I am seeing the site show up under the log record type of web proxy filter, which I take to mean it is not being bypassed. Do I have a misunderstanding of this entry, or is there possibly something I need to adjust? ~~~~~~~~~~ Bill Mayo Pitt County MIS