My "pet peeve" is the alert activity is already blocked even if the alert window doesn't auto close. It would be nice to not block for a certain period of time; e.g. 30 secs. or so. This would allow time for creation of the exclusion rule and allow the activity to proceed. That is HIPS ask rule capability.