Generally I would say that is a better option as the outbound protection in win7’s firewall (once enabled) isn’t very user friendly, is rules based and the user has to create the rules.