ISA can't log the username until ISA has it. In order for ISA to have the username, it has to ask for it. This is known as authentication. Most protocols don't even support the concept of an intermediate traffic processing point (AKA proxy); much less authentication to it. If you want usernames, you must limit your rules to "authenticated users"; this will force ISA to require the username in any request. If you want this behavior for non-HTTP traffic, you have to use the Firewall Client. Jim From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Page Sent: Tuesday, October 23, 2007 5:17 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Log users names without isa client Is there anyway to log usernames in ISA log, without Isaclient installed in desktops? Cheers