Perfect, thank you! That exactly answers the question, and is super helpful.   I'm going to check in with our IT folks on where they are with getting the new cert setup. Once we've done that, i'll let you know - hopefully you can permanently turn web protect mode back on and it will allow both.