Hi, Haute Secure is a so called soft sandbox/surf guard. It can be best compared with lincsanner pro, see http://hautesecure.com/howitworks.aspx The application is in beta (final stages). Beta has not reflected in many bugs while we were using it. On their website the more or less explain the functionality of the surfguard and not of the soft sandbox. Reason for this is that it can be used right out of the box without configuraton. When you want to play with it, you need to start the admin module from the program list (surfguard can be launched from a tray icon and a browser task bar). Web 2.0, XML, COM, Ajax, Java/J2EE and all other zero footprint distrbuted computing facilities, are the reason that I stopped using anti executables. The code can be anywhere, so a limited user rights and policy sandbox strategy is the way the go (may be backed up by a behavioral blocker). On Vista64 there is little freeware HIPS available. Comodo has some goodies. PRSC has a paid 64 bits compatibilty version. CFP3.0 is real 64 bits code, but most others are adapted 32 bits programs. Hautsecure also has a real 64 bits version. Because my son is a gamer, speed counts. Webbrowser protection of HauteSecure is good, but lately I also used it as a replacement for D+ and PRSC. The reduction of Vista64 startup time was remarkable. Using global template The admin has a global and a per program setting. Templates are default templates, which can be used for programs. When a template is valid for as certain program it becomes a profile. Idea behind it is that you have more profiles for the same program. Selecting prompt will prompt, selecting enable will block it silently. The admnin module needs structuring (e.g. devide in internal and external traffic facing programs, and within this the change of running dynamic code). For noob users it is nicely working ap, for power users the configuration needs some more refinement (to make it easier to use). When HauteSecure notices a intrusion it will pop up a warning. When you want to make it a permanent rule, you have to enter a check code (of I think 8 characters). For the power user it should be more easy to accept permanent rules. Using LUA in quiet mode (use tweakuac freeware) to deal with punkbuster, teamspeak etc, you still have file and registry virtualisation, IE in protected mode and programs start in LUA by default, when you log-in as an admin. LUA is a nice extra layer of protection, which was weakened by running in quiet mode. Using a global template, can reduce this without a lot of annoying LUA pop-ups. I have encloded a picture with the options selected for a global profile. Make sure you increase your response time (options screen of admin) to 60 seconds. These setting did generate only one or two pop-ups. As said: you do not need global rules when running full LUA, for gamers LUA in quiet mode and HauteSecure global profile will provide a very light strong defense. At the moment only running Avast 4.8 and HauteSecure (not using VFWC 1.3 and PRSC anymore) with default Vista firewall. Son is very very content with the responsiveness of his dual firstname.lastname@example.org gameing box. Off course the guys are former Microsoft employees and know the Vista architecture very well. So there speed headstart is understandable. Regards Kees Note the "block certain functions being called outside a module"has to do with vista architecture improvements, which are made even tighter. Pitty they do not explain what is blocked and what the effect is. Just as an example of the beta state of help info.