I've read so many horror stories about how difficult it is. That you basically NEED one of those 3'rd party plugins just to even make it tolerable, if not use a 3'rd party FW altogether if you want outbound control. But I just got done fixing a few people's boxes and decided to play around with the outbound control this time to see for myself. I personally don't get what all the fuss is about. I can do everything I can do in my Comodo FW from what I see, granted not laid out as nicely. In fact I can create in one rule what takes me 2-3 rules in my Comodo FW to make, since you can list multiple single addresses in the same rule. Granted, I just set a few app rules. I didn't get into other networking rules, i.e. svchost. etc... to see how it handles such things. And/or perhaps there's other weaknesses about it that I'm oblivious to? But from the sample size I got, the outbound control seems adequate to me just the way it is. This used to be one of my biggest concerns about upgrading from XP. Now instead it's one of the (very) few reasons I want to upgrade.