- Select firewall default action to accept or deny - Add host exceptions to above rules - New "Add address" window validates inputs and allow only correct - Use service names instead port numbers - Working "Edit" button