>some programs, that can't reconnect after "initial-access-is blocked" - … I've program …. >update goes ok only when I've choose "Enable all" mode.
Please make the difference between initial-access and the following access.
The initial access is blocked _only_ by default; the access of unlisted applications is blocked.
It happens only once as the application gets listed after the initial block is made.
Any program may require EnableAll for the regular operations. The requirements may be (or may be not) satisfied by you depending on your security policy and application activity details.
