I dont trust IE so I use firefox, but my bank and the new hotmail currently require IE, so I use it for those. If I open IE and click on Allow Once I have to click allow once for every single connection attempt by IE....and a web page has dozens of required new connections. THat as far as I am concerned is pretty useless. Allow once should be per session. If I open IE and click allow once, it should let me connect to anything I want as long as I dont close IE (or maybe for a specified/preset amount of time) the application. That is one of the reasons I liked sygate, the blocking was per application per session. Not per connection nor per packet in which case an "allow once" option (at least in http) is useless. Am I missing something? did I just rant in vain...is there a way to make the allow once work for the complete session? thanks.