> Non-technical people benefit from the application-level firewall just as well as technical users.

This can't be right, as you yourself originally stated `for the non-technical persons in our company its near to impossible to identify "good" from "bad" connections.`.