I generally use a hardware firewall, seems like the software firewalls eventually clamp down so hard they have to be uninstalled and reloaded. That and their so obtrusive that they interfere with computeing, have to be adjusted, programs have to be tuned for them.
Keeping a good clone though in case some one or some thing does get through.
For Vista it's still dual boot for me. Needs more maturity.