No we are using the free version for now, might purchase later if all works well. I have the VBS script which was in the documentation running at log in.
The Windows firewall is turned off by GP.
No other software firewall, just Symantec corp for AV.
Most PCs should have SP3 or AT LEAST SP2.