i was just wondering everyones thoughts, i think that implementing such a plan is so much work that its not worth it. configuring each machine with a firewall leaves way too much room for misconfiguration. granted it is possible it may be more secure if done correctly, but it seems to me that it takes away from the focus of doing your perimeter firewalls and DMZ correctly.