Hi all, I've recently been looking over several firewall/HIPS packages, and one of the frustrations I've been having is that none I have found (actually, one I tried I think but can't remember which one) can have different rules for each windows service. Instead, each service is treated as the same (i.e. grouped as 'svchost.exe'). There has been a thread on the CIS wishlist for about 1.5-2 years to improve their handling of svchost, so I doubt it will ever happen there. Tried Output, Online Armor, OSSS, CIS so far. Does anyone know a firewall and/or HIPS which can actually treat the different threads of SVCHOST as different depending on the service it represents? Cheers.