Well, that was short and sweet. Unlike me. Seems Agent doesn't have a problem at work, with a nice quick connection, HTTP tunnel or not. Remains to be seen if it will still throw a hissy fit when I connect via 'dial-a-pikey' at home. So I's not bowing out and those of you heaving huge sighs of relief: tough. Thanks to all those who explained the SSH alternative. It's rather like those people who go round smashing gatsos. If I see a gatso, I pay attention and try not to get caught by it, slowing down (or hiding on the other side of a truck) to not get flashed. Some people try everything, including bulldozers, plastic bags and lighter fuel, to wreck them. That's kind of how I feel about our IT department's efforts to 'secure' our system - rather than just accept that the rules and the means of enforcing them are there, I seem to feel the need to get round them all. Very odd.