I can't say for sure that MS firewall is safe from NSA attack. After all it seems to me that MS looked the other way for a decade or two while NSA exploited a vulnerability in MS Samba file sharing version