I have found this to be an advanced and effective firewall.

I've just recently been experimenting with rules (as you may have seen
in my previous posts) and have been able to successfully open up ports
from what is a very tight default configuration. My scanners and other
auditing utilities did not even see the device until I eased up on the

My only question now is, how do you mange these rules and etc for users
across a LAN environment comprising of approximately 1000 notebooks.
ZENworks came to mind but I am interested in finding out the proven
methods others have developed. I'm looking at deploying this in a
fairly large environment for users not so advanced.