We've been searching around and lots of people are complaining about this issue. It's not just me.
Ah, OK.
The version we run here is a pretty light client just for av on the pc. It doesn't have all the other firewall stuff that the home client does. That's done elsewhere on the network, and we have a separate firewall, the cisco one, for people when they're off the network.