I reported to you recently with a problem that the firewall was disabling alert mode on its own and releasing programs that were blocked into the network. I think I have found the culprit. It's the “PROFILE” option - once that suggests to me at home that I have an office network although it is not. It still makes a decision on its own and shuts down and lets everything go as it goes.
The office profile allows you to turn off the firewall without our knowledge and lets go e.g. office, exel, etc. Because it probably thinks it is supposed to have access to the network. But I don't think so. And it shouldn't work that way.
Translated with DeepL.com (free version)