I don't think you can do it. The "SCCM protocol" is *NOT* HTTP - the geniuses at Microsoft created this faux-HTTP that runs on standard HTTP ports - I think you'll find only IIS supports it. Unless you can make squid proxy non-HTTP traffic, I think you're out of luck. We're looking at doing the same thing using client certs and will probably use stunnel (instead of laying the SCCM server bare-assed on the Internet) Jason -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 481 8171 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users