We've seen many posts here that it messes things up, especially port forwarding. It's buggy. Use at your own risk. YMMV.
It doesn't. Basically, it's a one-size-fits-all firewall that blocks everything it determines is suspicious with no way for you to make any exceptions beforehand for things you want to get out. I my case Plex. It should be pretty simple, because I have a short list of IP address I know are going to connect and what port they are coming in on, but there is no way to add that exception. There is nothing "advanced" about this at all and boy, would I be mad if they were charging me $70 for this.