GUFW

GUFW is the graphical front end for UFW (Uncomplicated Firewall), which itself wraps the kernel firewall. Turn it on, set incoming to deny, and add exceptions per app or port with a few clicks — profiles for home/public networks included. It’s the closest analog to the Windows Firewall control panel, and for a desktop behind a home router it’s all the firewall UI most people need.

Know that many desktop distros ship with no listening services by default, so a firewall adds less than Windows intuition suggests — it matters most on laptops joining untrusted Wi-Fi. It controls inbound by default; per-application outbound control isn’t the UFW model (see OpenSnitch for that). Fedora-based systems use firewalld instead, where firewall-config is the equivalent.