> How do you control them from merely re-setting their browser preferences > to go around the proxy and go directly out through the firebox itself?? >
It's the way the Intranet is being separated from the Internet, which is very strict at our location, implemented with Firewalling rules. Letting the proxy-setup go, deprives the users from web access. The SQUID-host is located on the dmz. The firewall rule says that Intranet-users are allowed to contact the Squid-host at the squid port (only). So that's their only way out towards the web. M.
