It's excellent, you can filter network access per app, or per IP, or isolate an app and allow it to access only certain addresses / ranges and the interface is really intuitive and user-friendly.