Ok, ISA is set up, single server, using fire wall clients. I have successfully blocked many types of content. Now how do I go about disallowing "Anonymous" and unauthenticated users? I have a protocol rule called DENY that I can not assign "Everyone" to ;( ... Do I need to add each user to this list and the "Internet Access" group to the exceptions list.. Help I am confused (as always ;)) Jack Spradling