I connect to the web using a VPN (Windows XP SP2 PPTP) over dial-up. First the dial-up connects, then the VPN connects to the secure server. When the VPN connects, ESS always asks for permission first for an outgoing, then for an incomming connection (protocol "GRE & ESP"). ESS offers only to permanently allow the connection with the IP of my VPN server but it apparently has several IPs. How can I set ESS to permanently allow VPN connections? Do I have to make two rules for every IP? Other firewalls simply let this pass without asking. P.S.: I'm using ESS 3.0.566.0 (90 day trial ). The program works quite good for me. As it looks now I will get a license. This is the first version I managed to install - the others "ended prematurely".