I should have mentioned that was for ZA 37 Pro with most of the Pro features disabled. I wonder if the free version uses less just for firewall use and not ad. blocking etc.
theAnimal, add vsmon.exe too.
sean2002, I assume sonicwall is a HWF.
Doh!, Kerio is akin to TPF 2 but worth considering.
Nohr, using an older version of TPF or ZA is always an option but not if it is less robust. I did not care for the ZA3 interface versus 2 at first but it is a better proggy and some of the crap can be toggled off.