If I have a bunch of URL's I need to block (protocol/port unknown -- I was just going to block via address), would I set these up as an URL Set or Domain Set? and Why? When creating my Firewall Policy, I can select either, so I just want to know what's the best choice. ie: people.freenet.de/zmnjgmomgbdz/ people.freenet.de/smtmeihf/ people.freenet.de/qisezhin/ people.freenet.de/fseqepagqfphv/ people.freenet.de/urfiqileuq/ people.freenet.de/wjpropqmlpohj/ people.freenet.de/mclvompycem/ scifi.pages.at/zzzvmkituktgr/ home.pages.at/npgwtjgxwthx/ free.pages.at/emcndvwoemn/ home.arcor.de/ocllceclbhs/ home.arcor.de/dixqshv/ home.arcor.de/srvziadzvzr/ home.arcor.de/nhirmvtg/ home.arcor.de/jmqnqgijmng/ (addresses for the source of the Sober worm update) Jonathon J. Howey KPSA Compliance Management Inc. P 780.409.5620 F 780.409.5621 D 780.409.5628 C 780.965.8363 Jonathon@xxxxxxx Guiding the Future of Transportation www.KPSA.ca <http://www.kpsa.ca/>