Henrik Thanks for that. Explains what I am seeing for this software. Given my browser acls which only allow specific known user-agents then anything that doesn't come into squid with a User-Agent header is going to get the forbidden error. As this particular software uses one particular site then maybe a dstdomain acl above the browser ones will be the answer. I'll give that a try. Thanks again. Steve -----Original Message----- From: Henrik Nordström [mailto:henrik@xxxxxxxxxxxxxxxxxxx] Sent: 21 May 2010 08:36 To: Steve Cc: squid-users@xxxxxxxxxxxxxxx Subject: Re: agent.log and https clients fre 2010-05-21 klockan 00:20 +0100 skrev Steve: > I have a quick question about agent.log. Does the user agent get > logged for https clients? Most agents do not indicate who they are in CONNECT requests. Regards Henrik