firewall is becoming less useful address range protection gies you a false sense of security you are protecting traffic using https/whatever anyways maybe address ranse protection eases administration, but ultimately a wrong way think about it: roaming laptops going into enterprise perimeter with virus infection per-host protection is seriously necessary if you have host firewalls on every single Windows machine, why the hell would you need firewalls?