All, I feel like a newbe. I don't understand the basic mechanism used by the web browser to access the ISA server and then have the request forwarded. Looking at netstat on my w/s, I see the ISA connection as source port <random>, destination port 8888 (the port we designated for proxy use). Does this mean that the request to get to https://anywhere.com is encapsulated in a plain vanilla packet destined for port 8888 on the proxy? How does the proxy know what address i need to get to and what port I want to use to get there? Can someone enlighten me about this most basic of processes?