Would you also be able to provide the output from "show ip route" along with either the current running-config or the configuration from the interfaces that the servers connect to?   Kind Regards,   David

Hi Lucas,   You can configure a HTTP block page as normal and use SSL decryption to decrypt blocked sites first, this way the end user will still see a block page response, rather than a timeout on those blocked pages.   Kind Regards,   David