igirl1, this is all fairly new to me, too. My knowledge on this is sparse.
In my Little Snitch "Rules," I'm viewing the many items currently listed under "WebProcess." They all have the green dot and check mark for "Allow" -- as a result of me clicking "Allow" and "Forever" during recent sessions.
Without doing an exhaustive examination of the items, I see that most of them are related to "legiitmate" websites that I have visited; some are websites I routinely visit. For me, those sites raise no "red flags" of concern.
Yesterday, it seemed that EVERY website I visited, I got a series of 3 pop-up windows that had to be "Allowed" (or not). But, today, I'm accessing websites without getting the pop-up windows. And these are websites that I have not visited since upgrading to Safari 5.1. Maybe Little Snitch is smarter than I think, and has a secret knowledge of my wishes. LOL.
Probably, when I make time for it, I'll review each item and see if there are any that I prefer to change, i.e., DISALLOW.
--David