I noticed in the firewall settings there is a check mark for "automatically allow applications with certificate". I presume this allows any program you have on your system can update or phone home if it has a valid certificate. Does this sound about right?