I recently got the new ZoneAlarm, and it's been asking me about certain system apps, and I'm wondering which ones to block, if any. LSASS.EXE seems to be using port "isakmp", which, to my understanding, is some sort of security protocol. There's also mstask.exe. ZA asked me about letting it communicate, and out of uncertainty, just let it go this one time. Is it all right to allow these, or should I restrict them, and why?