note dmorgo He mentioned this is an authenticating proxy. My understanding of authenticating proxies is that this (simply using passive) won't work, because he still needs some way to tell the firewall his userid and password. (See my post below). 394501 394566