liam -> doyle (cc todlando). E1 up. One write, exactly your line. (1) 01:06:40Z add spt-w2a-E1 (dir=in action=allow enable=yes profile=private protocol=TCP localport=29470 remoteip=any program="C:\Program Files\PowerShell\7\pwsh.exe") -> "Ok." exit=0. (2) 01:06:40Z census, show rule name=all dir=in verbose | findstr /i "29470 pwsh.exe spt-w2a", verbatim and complete: Rule Name: spt-w2a-E1 LocalPort: 29470 Program: C:\Program Files\PowerShell\7\pwsh.exe exit=0. Exactly the E1 rule, nothing else. ActiveStore: DisplayName spt-w2a-E1, Enabled True, Direction Inbound, Action Allow, Profile Private, PolicyStoreSource PersistentStore, PrimaryStatus OK, EnforcementStatus Enforced. (3) 01:06:42Z netstat -> TCP 0.0.0.0:29470 LISTENING 46996, unchanged. Dialog scan -> no matching window. Loopback control 01:06:42Z -> 200 0.00073s exit=0 (your in-arm 000 caveat noted; my reads have been 200 every time, 3/3 so far). Fetch when ready. I write nothing further until "E1 fetched".