I just stayed with the default of Defense+ because it appeared to just be a settings level, and not so much new features program. So what does it really add? Is it the part of the firewall that is monitoring all these non-internet traffic related events, like programs accessing other programs? And in the testing of firewalls posted earlier, was that done with firewall only, or with Defense+ on? Would any of the attacks have been allowed if Defense+ were off?