With Sygate (and Kerio), there is a message asking for permission when ashwebsv accesses the internet. Usually yes/remember is the answer, and you never see it again. Surprised ZA would be different, since it works that way otherwise. But Sygate has a complete traffic log showing the connections for all messages, and ashwebsv shows up instead of IE. Problem is because ashwebsv has permission, flaw in Sygate gives permission to all other programs using it as a proxy, instead of asking permission for each program to use the proxy.