Huh? I've *NEVER* heard great things about WinDoze firewall...
That's only because the interface for it is far too complicated for most people to comprehend. Netsh and/or the registry.
Simply because what the gui reveals is little of the feature scope, most think it doesn't do much. It's almost like iptables in capacity (almost I said) with some additional functionality in that it can control access on a program by program basis. Pretty "great" if you ask me:)