Just noticed that if I do a "cloud" program (simple IPNetInfo utility from Nirsoft) that the firewall asks for approval each time. Apparently it's because a new copy is d/l'd each time into a temp directory and the firewall assumes it's a new program, which is a reasonable default. I'm in Interactive now after a week of Learn & Automatic. So you "Cloud'ers" check out your own wares and see if yours acts the same. I see some kind of certificate or MDS check for authorization a solution option.