Norton 360 Firewall Settings

I am working through a Trojan infection (powelik plus others) that got passed my Norton 360 install.  I read on the Symantec website a number of best practices for preventing future infections, but none of these really tell me which settings I should choose in Norton to make this happen.  For instance the page on the Poweliks Trojan says:  "Use a firewall to block all incoming connections from the Internet to services that should not be publicly available." I have the Norton firewall install and operating -- how should I set it so that the above is true (while still allowing me to access the internet an let Windows update and etc.?)

Thanks in advance for any help you can give.