Thanks, Billybob, I just realized there's a raft of things I don't uinderstand...

Are we sure that it's normal behavior for the AV to apply only to HTTP/S traffic?

If the FTP Proxy is enabled, should one remove FTP from the HTTP allowed services?

In Transparent Mode, how does the Proxy know that it's my browser making an FTP request instead of Filezilla? If I don't have a PF rule allowing FTP, and I haven't enabled the FTP Proxy, shouldn't such requests be blocked for Filezilla?

Cath, are there other "pernicious" things about what goes in the HTTP Proxy allowed services list?

Thanks - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!