I understand that you like the firewall alerts of 2.4.
Right click CIS>Firewall Security Level>
change 'Safe Mode' to 'Custom Policy Mode'
Open CIS>Firewall>Advanced>Network Security Policy
to review the firewall rules already created by CIS. (If you want to test, delete the application rule for Firefox, click OK and then try to connect Firefox).
You will get firewall alerts for all the programs that wants to connect to internet, irrespective of whether it is safe or not, if the firewall rule is not already made in 'Network Security Policy' mentioned above. This will make you feel home more, like 2.4.