use "apply-proxy-acl" on the sofia profile. /b On Dec 15, 2009, at 10:58 PM, Bill W wrote: > > However, having the proxy in the path effectively negates using IP > based > ACLS.