Firewall instead of Avast 6

Matousec said that when they test CIS, they use the ‘Proactive’ configuration.
No other changes are made and CIS scores 100% for them.

PS: As an experiment, I ran The FW & D+ alone for about 6 months, without any AV and I was never
worried about being ‘Hit’