all, ISA is setup to allow an AD Internet access group out. There is one user not in that group, that we want to allow access to 1 site. I created a dest set for that site *.site.com. Created a site and contect rule allowing that user access. He is being challenged for a username and password, and cant access the site after he enters his credentials. Am I missing something ?