I have made configuration for active sessions with splash as described in the official guide http://wiki.squid-cache.org/ConfigExamples/Portal/Splash . Now it is working well I`am planning to realise this scenario: 1. User is trying to access web and getting splash. If he did not access clicked_login_url then after TTL timeout is up new session will start and all users requests will go throw redirect program. 2. User is trying to access web and getting splash. If he accessed clicked_login_url before TTL timeout is up new session will start and all users requests will bypass redirect program. Does anybody know what changes i should make in external_acl in the default config to let it work?