I need to script in a rule to allow access to Citrix access Gateway file cag_plugin.exe for TCP to the Public firewall profile I believe netsh advfirewall might help but not too sure best way to do it. I tried doing an export but this seems to export everything - I only need the one rule. Can you use the command line to simply add in that executable file ? ThanksIan Burnell, London (UK)