I see no reason why you should not use WebShield with SPF, Culpeper?
All the browser HTTP 80 TCP connections still get logged as an ashWebSv.exe enties.
I am not using Win98, but I have understood that it works like the redirected port was already blanked. So you have to use a manual proxy, and this I think is s good thing.