You really want ZoneAlarm or similar firewall - MS firewall is very poor, not very configurable, and for most power use (ie anything outside browsing ) it does not have the granularity I would require.

(my view is that you would then also have a hardware firewall, but I am in the paranoid industry)