It doesn't use the Windows firewall... it acts as another firewall by using its own block/allow lists. If PB blocks a webpage, when you look at WFC Connections Log, it will show that the browser was blocked. If PB blocks a tracker or a node in the torrent swarm, WFC Connections Log will show a corresponding block for uTorrent. The only time PB appears in WFC Connections Log is if its own connections when trying to update get blocked. In regards to WFC, any chance the FAQ on Binisoft site could include a section to explain the "Policy" feature?