[Skunkworks] ISA 2004 Help Required - Allow Websites

[snip] I need to allow only selected websites for "Internal diaspora" (after top dogs are already allowed everything). In squid, if I wanted to allow access to google.com and any subdomains, I'd specify a dstdomain rule in an ACL. So I can do: .google.com, .yahoo.com, .gmail.com, etc. Not with ISA! Does anyone know how to achieve the same with ISA (2004 here, btw)?? If someone visits yahoo.com and it comes up with yahoo.com/something, ISA denies it. ISA wants me to specify every possible contraption on a domain. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "If you have nothing good to say about someone, just shut up!." -- Lucky Dube