The firewall f-secure includes only has two options, allow all and block all. Non tech savvy people may think they are protected more than they really are because the word "Firewall" is somewhere in the software dialogue.
ClamXav Sentry scans files that are active (read write, executed etc). Easily setup to launch on startup / boot. Can be configured to monitor specific directories with or without sub directories (recursively).
Putting files back after false positives with Adobe cloud updates is not fun. It's a pain to have to look at the scan log to find the full path on where to put back a file. The path where a file was taken from should be shown in the quarantine window.