Original: It includes an inbound intrusion detection system, as well as the ability to control which programs can create outbound connections.
Simplified: It includes an inbound intrusion detection system, as well as the ability to control which programs can create outbound connections - the latter not available in the Windows XP Service Pack 2 firewall.