Firewall Should Have Packet Filter Options, Firewall Work On Server By Default

Since SEP is no longer SAV the scope has been completely changed.  Agnitum, Zone Alarm and many more firewall providers include packet filtering by default with simple configuration options.  The firewall on SEP has been largely unusable, due to incompatabilities with Servers and problems on domains.  I tihnk it's time that we have a full Endpoint Security product by allowing us to actively monitor and configure what programs are reaching out on each individual computer.  Maybe it is listening by default, much like the tamper protection (but easier to use) giving us a report with, "Allow, Allow Once, Block" options.  This could potentially keep us from purchasing additional equipment to block P2P and rougue programs that are eating bandwidth...i.e. Blinko TV etc.

While I'm at it, the firewall really should work on Servers, yes even domain controllers.  There are only so many ports used in communicating from client to server, it doesn't mean that they should be without protection.  The firewall should actively monitor and send a report to an admin as well.  This could be all part of the packet filter/firewall solution.  How many times have we bought a new version of a symantec security program to only install portions of it, because what we paid for isn't supported...makes shares on x64 systems dissapear... etc.

Thank you

Joseph Stellato