for once MS is superior to the third-party brand
The silly Windows XP "firewall" has far fewer vulnerabilities than the Norton brand - but then, relying on a software firewall that's installed on the same computer you want to protect is about as smart as protecting your money by keeping it in a paper sack.
For those who insist on using software that gives them a false sense of security, something from a Sourceforge developer is a better choice. And it won't cost any money.
And for those who want actual protection, get an external firewall/router device. Refurbished Netgear devices can be had for as little as US$11 if you shop around. Brand new "white box" router/firewalls are only about US$12.
Compare to Norton's vulnerable package, which is rented, not sold, at about $40 - $60 annually.
This is part of my job - computer security is NOT accomplished by slapping a band-aid on top of Windows.