Comment by skirge

how? Do you investigate each blocked packet as separate alert?