I noticed that Windows Firewall policies are now an option in Sophos Central. Looking into it however all you can do is set monitor, block, block with exceptions, and allow. Unfortunately if you use block with exceptions you have to manage those locally on the computer. What is the point of having this as an option in Central? You would be better off just using GPO. I would like to see the ability to look at the monitor logs centrally and build windows firewall policies to be deployed from Central. That way all of you endpoint security is managed in one place. This seems like a very worthless addition to Central so far and needs some more features.