I searched the forum to see if CFW has SPI configured out of the box, and I see posts from 2007, 2008 & 2009 confirming that. So, in 2011, is that still the case? 
Also, can I install only CFW and nothing else?
Any special steps to take in order to do this?
CIS/CFW is still a SPI firewall. That never changed.
You can install CFW only. Get the installer from here: Firewall Download | Best Firewall Security software for Windows . Notice that by default you will download the combined installer for 32 and 64 bits versions. When you want to download installer for either 32 or 64 bits you need to use the dropdown menu.
Thank you, Eric.