This only prompts you after the connection has already been rejected, instead of holding it for approval like Little Snitch and Portmaster -- but I did have WFC installed on my Windows machines anyway, it's still useful.