As it sits in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall i'dd say per machine.
It's also controlable in GPO per machine.
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.