Please can somebody explain the following. DEFENSE + EVENTS LOG This is stated as being a record of events. Quite correct - it is just that. Application, Action, Target, Date. The ACTION listed is what has happened, that an application has carried out a specific task against a specific target and as far as this log shows, it has succeeded. It is like being told your home has just been burgled and nobody took any action to STOP it. How nice to know ! It does NOT say what ACTION has been taken to STOP the event. I have never seen a BLOCKED stated in this column. It seems to be a record of unlimited intrusions and not a record of security action. FIREWALL EVENTS LOG No problem here. The ACTION has BLOCKED all down it, with a red marker. So this is not just an EVENT log, it is a SECURITY log. Any offers please ?