I have deleted Block Rule.
This is my ISA setup conditions:
There are three rules and two Protocol rules.
Allow Web Access Rule:
Destinations Selected destination set Open Sites which
only business related web sites allow.
Operators Access Rule:
All destinations, but only break time hours allow to
access web sites.
Sales allow all.
I delete Block Rule:
Destinations Selected destination set Block Sites which
sex and drug web sites to all users.
Allow Operators Access
Allow Sales Access.
It is still asking password for business web site.
Jimmy