Just decided to dump kerio as it hasn't got component control, poor logging and a bunch of other crap missing that really, should have been there, and since its content filter is messy (especially on forums) and its private data "vault" is useless, a farewell to a trusted product. Comparing the things that Tiny(T), Sygate(S), and Outpost(O) [Pro versions] have over Kerio and/or each other............ Sygate features - Mac and IP spoofing prevention ----> unique, but useful?? - Active response / Dynamic stealthing ( a la Zone Alarm) - Blocking "listen" connections (like Armor2Net) - IP fragment protection ---->others don't mention, but may have it, Router does - OS fingerprint masquerading -----> cool!! can I do this without Sygate (manually)? - bootup protection - Anti-termination protection - Terminates known trojans --->nice Outpost features - Malformed DNS protection ------> wonderful, but don't others have it as well - Memory injection protection ---> decision influencing item (DII) #1 - Bootup protection - DNS caching ---> eh... doesn't svchost.exe do that for me? - referrer blocking, cookie control ---> DII #2, unless a 3rd party app does that for ALL browsers - Ad blocking, mobile code blocking - Updates for Adblocking lists Tiny features - File Access Guard ---> unique, seems painful - Registry Guard ---> ditto - Process Spawning Guard ---> DII #3 - OLE/COM Guard (is this protecting OCX?) ---> DII #4 - services control Guard ---> See T1 above - Device Access Guard ---> ]JetDirect based Printers attacked on port 9100 - Snort based IDS/IPS Now... Which firewall should I choose and why? out of the three... if u say Jetico, I'll say "beta" if u say Look 'n' Stop, I'll need a feature list.