Vista's firewall is enabled by default - but the outbound protection is poor.
It is possible, but difficult, to configure Vista's firewall.
Article:
http://www.pcworld.com/businesscente..._security.html
Comodo personal firewall is compatible with Vista.
http://www.personalfirewall.comodo.com/