Is this happening with clients from all subnets? Do you have one single domain? Probably you have configured Protocol Rules and/or Site and Content Rules based on user names and Groups. Have you checked the box "Ask unauthenticated users for identification"? It's located right clicking your server in ISA Management. How did you configure your browsers, with script, Auto config., or IP address? Sorry by my English! Elcio Favare