This is a follow-up to my posts what 2 months ago about a client trying to do PDF retrievals from a 3rd party website using XML calls. He is using the XMLHTTPRequest Object. What is happening is the only way it works is by allowing unauthenticated in the rule. Of course, that can not remain. He would like to know how to get this to work passing authentication credentials to ISA to allow access. ISA 2004 standard on Windows Server 2003 standard. (Will be ISA 2006 in a couple of weeks.) Calls originate from the web server, Windows Server 2003 Standard IIS 6.0 website. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882)