This is very common with squid, same in my logs, its more along the lines squid tries to fetch the page without using authentication, which is denied, than fetches the page with authentication and its correctly presented. You always see two denied and the connect, this is "dummy" traffic as nothing is fetched from the site. It's perfectly setup. Alex -----Original Message----- From: Chris Lee [mailto:chrislee@xxxxxxxxxxxxxxxxxx] Sent: 03 November 2008 06:24 To: 'squid-users@xxxxxxxxxxxxxxx' Subject: SquidNT TCP_DENIED Hi, Form the access.log of my new SquidNT (version 2.7.STABLE4) box, I got some TCP_DENIED entry, before the users can access the website. 1225693114.517 10 10.1.10.147 TCP_DENIED/407 1721 CONNECT urs.microsoft. com:443 - NONE/- text/html 1225693114.547 30 10.1.10.147 TCP_DENIED/407 1933 CONNECT urs.microsoft. com:443 - NONE/- text/html 1225693114.577 240 10.1.10.147 TCP_MISS/200 6346 CONNECT urs.microsoft.com:443 domain_nt\osec DIRECT/207.46.50.124 - Why the first 2 entry does not go the domain\user info? Did I misconfigure something? Regards, Chris Lee This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.