A few years ago I tested and found that Comodo Internet Security (CIS) was the only one who has demanded before deleting a virus all (known) software firewalls (- has enabled> and exceptions) and their firewall was configured, how I wanted it.
Unfortunately, Comodo developers have introduced not only a terrible optics with the new version, but also just painted these features. Therefore I was looking for in 2014 and further tested the latest versions. While at a friend of Stiftung Warentest test winner GData works wonderfully, he destroyed my Windows. It no longer boots up or stops after a short time completely depend. Even after reinstallation.
Ultimately, I found the Avast Internet Security, installed exclusively antivirus and firewall, set under Tools -> Firewall -> Setting the behavior on "Demands" unchecked and have since fully satisfied.
I notice no performance loss, viruses'm sure you can specify false positives before cancellation and had a firewall with the choice (!): Yes, yes always, No, Never, Only inbound or outbound. Perfect.
Important: I did not buy the product on Amazon. Currently, I recommend, on Avast.de a license for Internet Security, 3 PCs, to buy 1 year long. There's laptop and friend (in) with covered. Should it in the future at Amazon a "real", give cheaper deal, of course, can be purchased here.