A local firewall can be set up along with an external firewall. Having a firewall only somewhere on a separate machine doesn't address the use-case alok-g described - he (and many others including myself) may want to "easily control which application can access the Internet".