Kerio Server Firewall

This sounds pretty cool; must have a built-in sandbox of some sort. From the screen shot of the application hardening feature, the sandbox looks very configurable. Has anyone tried this yet?

http://www.kerio.com/ksf_home.html
http://www.deerfield.com/products/server-firewall/

Application Hardening secures server applications from being exploited by network worms or hackers. Unlike traditional signature based systems, Kerio’s application hardening has the ability to proactively block new types of worms exploiting unpatched applications. Application hardening constantly supervises application’s behavior and blocks unauthorized suspicious calls to the operating system. It protects against buffer overflow attacks as well as other attacks using security holes in server applications, backdoor applications, executable files, and system tampering.