This only prompts you after the connection has already been rejected, instead of holding it for approval like Little Snitch and Portmaster -- but I did have WFC installed on my Windows machines anyway, it's still useful.
I used Portmaster too until they started locking existing features behind paid subscription. And generally just pushing towards microtransactions in general. I vastly prefer buy once or buy per major version.