Is it fair to say that the free version of Sunbelt Kerio offers more advanced protection than the free version of ZA? I have played with both of them and Kerio seems to be more effective for application control i.e. programs launching other programs and also has network intrusion detection which I now understand (from recent posts about the WMF exploit) that the Kerio IDS uses SNORT - is that correct? I'm not technical enough to understand much about SNORT but I have read that it is one of the foremost IDS. As far as free firewalls are concerned these two are my shortlist. In terms of GUI, useability, system performance and compatibility with my other security apps I like them both pretty much equally, so my decision is based on which offers the strongest overall protection.