diff --git a/WelsonJS.Augmented/Catswords.TlsReport/Tls12OfflineInspector.cs b/WelsonJS.Augmented/Catswords.TlsReport/Tls12OfflineInspector.cs
index cbf4c23..8c0d578 100644
--- a/WelsonJS.Augmented/Catswords.TlsReport/Tls12OfflineInspector.cs
+++ b/WelsonJS.Augmented/Catswords.TlsReport/Tls12OfflineInspector.cs
@@ -398,7 +398,7 @@ namespace Catswords.TlsReport
 
             var funcs = ReadMultiStringHKLM(k, "Functions");
             if (funcs == null)
-                return Warn("Cipher suite policy Functions", "Functions value not readable or not set.");
+                return Fail("Cipher suite policy Functions", "Policy key exists, but Functions value is missing, unreadable, or not REG_MULTI_SZ. This can block TLS handshakes.");
             if (funcs.Length == 0)
                 return Fail("Cipher suite policy Functions", "Functions list is empty. This can block TLS handshakes.");
             return Info("Cipher suite policy Functions", "Functions count=" + funcs.Length);