Hello Jeremy, you are not using SNI, you are using the Host header to pick the backend.
You are also using a non-standard port, so the browser will append the port to the Host header [1].
If 8443 is the port the browser connects to, your ACL's must look like this: acl site01 hdr(host) -i site01.domain.com:8443 acl site02 hdr(host) -i site02.domain.com:8443 Regards, Lukas [1] https://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23
