i've been using ZoneAlarm for a couple of months and it works great. the only program really allowed to GET stuff in from the internet is Norton anti-virus.
i even turned off explorer from being allowed to go out. i only use Opera to browse.
no problems, no virus'. but then i don't use Outlook or any of that windows crap.
firewall, good! :-D