Use the built-in Windows Firewall.
Over ~5yrs it's been out, and the hundreds of customers I look after, from corporate clients behind hardware firewalls, to field engineers roaming through lots of insecure networks, I've not had one incident of users being compromised OR of users being hindered by firewall issues.