Thanks, Dch48 for the input. I might download the full ver. of W7FC and play with it. Do you have to uninstall the free ver. or will it overlay the free ver.?

Also read an interesting discussion on their forum about how they recommend “beefing up” the svchost.exe - win updates rule to include MS server IPs. Looks like no one can find a way to bullet proof Win Updates.

Also, PrivateFirewall does look interesting but appears to be very “chatty” on the alerts.