Reading Craig's book - i noticed that the BRDCFG sets up default
filters to
allow udp vpn etc to function, however I do not see any filter
exceptions or
any default filters in filtcfg yet our users are getting out thru
proxy.

When I reinstalled BM 3.6sp2a i went directly into NWadmin then the
question
was Allow or Deny...i selected allow. Do i still need to run BRDCFG?
then
set up exceptions deny or permit?