From testing it seems that when you add a target service under Web Protection > Filtering Options > Misc, that it applies to all proxy users and destinations. So if I need to allow access to port 9000 for one user to one website, all proxy users will…