AMA: Windows security and best practices

Hi i heard that Microsoft is introducing new configurations in Windows Firewall. Can you talk about the enhanced management and capabilities for the built-in Windows Firewall to help IT provide better overall protection? Would love your feedback ex. One example Application Control for Business (as  known as Windows Defender Application Control) app ID tagging with Windows Firewall rules though Intune. This enables IT to target Windows Firewall rules to specific applications without an absolute file path.