On 05/13/2018 06:50 PM, Amos Jeffries wrote: > should this work? > > acl step1 at_step SslBump1 > http_access allow CONNECT step1 Yes, step1 should work in http_access IMO, but I do not know whether it does. According to the latest Amish email, it does work, which is good news! Cheers, Alex.