my 0.02$ for v7:

1.) rule tester for firewall (like barracuda does). if u have a bunch of firewall rules and even not sure if your existing rules are 'enough' for your new application to work, just put your credentials (like source ip, destination ip, tcp/udp - port ...) in the ruletester and see, if the connection would already work, without creating a new rule.

2.) dynamic dns names in firewall rules with continuous lookups (like every minute...), if there is a new IP address for a DNS string.