Original: It includes an inbound intrusion detection system, as well as the ability to control which programs can create outbound connections.
Simplified: exe "in the processes list.