Ara, Both ISA firewall service and surfcontrol service must be disabled, I reminded this point just after Surfcontrol released SP1, they did not say this point in their installation instruction. That installation should have been able to control shut-down firewall service, it coudl not (after upgrade SP1 to ISK2K4). As such, the plug-in is not updated to new one!