Just moved from sygate. I used to deny server rights to programes in sygate. with kerio do i allow in or out connections to applications.
Generally speaking, just allow outbound. Only allow inbound if absolutely necessary for something to work properly, i.e. perhaps some P2P programs might need inbound allowed. Your DNS rules will need inbound allowed as well as a few other things. You might look here: http://www.dslreports.com/forum/remark,8023708~mode=flat for a good starter default rule set to replace the one that comes with Kerio.