I think there's an important distinction between firewalls for client security and firewalls for server security.