Like others have mentioned, I do not like the idea of an auto update that I can't turn off. Zone Alarm and myself have suddenly become incompatible. The problem is, it is the only firewall I have ever used, so I don't know diddley squat about rules creation. Installed Kerio after disabling ZA, went through all the configuration options and it created a few basic default rules. I then got online and started all of the applications that I would ordinarily use or update through their built in updaters, allowing Kerio to create rules for each in turn(learning mode). After finishing with this, set Kerio to it's highest security setting, therefore blocking all other traffic(as I understand it). Went to PC Flank site and ran quick test, advanced port scanner, and exploit tests. Passed everything, no problems. So why don't I feel secure? The problem is I don't understand what I am doing. I have read a lot of info from posts here and SpywareInfo site, plus looked at the provided links in the various threads. I understand how to use the program. I do not understand the whys and wherefores behind the creation of the rules. In the screenshot attached are the basic rules created by Kerio. I do not know if they are good as they are, or should be edited. Looking at some of the screenshots in other threads, people have far more rules, so I can't believe that I am good to go as it stands now. I realize that if something is not working, that I may have to add a rule or edit an existing one in the future. Concerning the apps that I allowed Kerio to create rules for on an individual basis, some apps needed two rules(TCP and UDP). Some of Javacool's apps are an example of this. I understand the deny if you are not sure theory, but how are you supposed to know? I am not looking for an answer on a rule by rule basis. What I need is someone to point me in the right direction as to understanding why the rule needs to be created and being able to properly create the rule so that it fits my needs. I have no need to be on the internet. I do it because it is fun and I particularly enjoy the security aspect of it. If I do not acquire the knowledge to be comfortable with rule creation, it will not be fun anymore. I am drowning here, someone throw me a life line. Please!