I'm currently using WFC (Binisoft) now Malwarebyes, but it is lacking a few features. Features such as an advanced interactive menu which allows the user to allow or block an application for a period of time and customize the rule upon notification, HIPS protection, and true boot protection like OSS. I have noticed that WFC has allowed a few applications pass through and connect to the internet without notification. Application firewalls that I have used in the past were OSS, Eset, and Sygate and on MAC LittleSnitch which satisfied those requirements. Eset is not a viable alternative due to the fact they DO have a backdoor that they use... different discussion entirely.