Ok. Normal operation.
But if the user does not ‘ignore the local traffic’… ?!
Am I wrong to think that there will be local traffic scanning or not?

Maybe it’s the answer to my question… I’m not sure.
Maybe only with ‘outbound’ connections the traffic will be scanned and not ‘all’ local traffic (access to disks, read, write, etc.)

By the way, is there an IgnoreProcess value for Standard Shield?

Thanks for your explanations. I’m not an expert on all of this…
Vlk, don’t worry, no hard feelings 8)