IMO, what you are looking for is actually this ACL definition: acl adobe ssl::server_name .adobe.com or its regex equivalent, acl adobe ssl::server_name_regex (^|\.)adobe\.com$ HTH Amos