1, i want my users, only to use explorer, firefox and safari except that all user agents will be blocked. 2, 2nd problem is i can not restrict skype. listed ACL is what i saw on internet while i was trying to find a solution for stopping the skype-access but it didn't work in my case i can still connect skpye. acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ acl skype_connect method CONNECT http_access deny skype_connect numeric_IPs all any idea for that . please help. Thank you