Just as the title says. Most beginners don’t know what it means when they get this popup from their firewall program:
And they usually learn to click always allow to anything so they can continue to serf the net without problems.
OK a bit of a exaggeration, but beginners do seem to learn just to click always allow after being locked out of the internet with a few wrong block clicks.
This leaves the firewall pretty much useless for them, as such I have given up on installing any firewall for them and just having them use the XP firewall.
I’ve heard good things about Zonealarm. I always tended to use Sygate Personal Firewall - the company was bought out by Symantec (hisssss) in 2005 and SPF was discontinued, but you can still download it from OldVersion.com
The “always click OK” habit is a difficult one to beat out of people. I think Zonealarm together with a talking-to together with periodically checking the list in the program control section of Zonealarm to see if there’s anything quirky you should disable is about the best you can do for your friend. If they don’t like so much hand-holding or it’s not convenient, then I’d just mutter and leave the Windows firewall turned on for them (and make sure their antivirus program auto-updates).