black ice has a firewall and an IDS. it has application protection like any other firewall but you can choose not to install it.