All trafic use ekrn to acces internet. I hate this such of proxy analysis. ekrn suck a lot of cpu time and all rules in my firewall (outpost) need to be modified. I have disable web protection in Nod3rc1 and my firewall see all web access going thru ekern anyway. Also when I restart my PC web protection is back active. I have uninstall rc1 and reinstall Nod 2.7, far away better and more usuable with Outpost!