It can be used as a mainly application controll firewall, same as Sygate. In many ways it is easier.
Users familiar with other firewalls should install it straight with the "advanced" ask everything setting. Controlled I think by the "Any Other Application" rule that should be set to ask I think in all 4 settings, trusted or internet, inbound or outbound connections.
Regarding to Avast's asmaisv.exe, I left it in block for inbound and made a packet filter rules for outbound pop3, smtp and nntp ports.
Those packet filter rules are the same as the so called "Advanced rules" in Sygate.
Then I went to sycnhronize my computers clock, and was pleasantly surprised Kerio did not need any 'Packet filter.." rule for that. It worked straight out.
Tech, if you read this, I agree with you that BZ's ruleset should not have to be used with KPF 4.
KPF 2.1.5 is a straight packet filter and those rules there are are handled by 4.2 automatically. They can be of cause applied if some knowledge and wanting a really tight setup, some of them to tighten up, but totally different beasts. Kerio 4.2 is really much more user friendly. No beed to handle DHCP or DNS traffic.
I disabled web filtering ... some setting there disabled me to run my fave speedtest:
http://www.adslguide.org.uk/tools/speedtest.aspKerio 4.2 did not slow down my connection at all. Neither did Sygate ever slow down my internet connection.
I enabled "Enable Advanced Behaviour Blocking" that handles among other things applications launching other applications. Needs my permissions for them to do that. "Antiapplication hijacking" feature is the same in Sygate.
So far so good, and absolutely no crashes in GUI as I have heard some user's having
Jarmo