Hi Scott, What site is requiring the Firewall client to make an SSL connection? Might be that the site requires an SSL connection on a non-standard port, however, this would explain the difference between Web Proxy and Firewall client, not SecureNAT and Firewall client. RE: Firewall client and VPN clients, VPN clients can't be SecureNAT clients, but they can be Firewall and Web Proxy clients. Check out the ISA/VPN kit article on forcing firewall policy on VPN clients. HTH, Tom -----Original Message----- From: Scott Force [mailto:list@xxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, January 20, 2004 8:53 AM To: [ISAserver.org Discussion List] Subject: [isalist] Firewall Client http://www.ISAserver.org What would cause a firewall client to start requiring a SSL connection for no reason? I have about 3 Firewall Client users (out of 125 users) who get an error message in their browser that they must connect to regular (yahoo, msn) webpages with an https connection. They run 3rd party apps that need the Firewall client installed so my SecureNat temp work around can't stay configured. Also, is there a way to configure remote VPN users to access my ISA server for Internet without installing the Firewall Client? Thanks, Scott. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')