Texas A&M University (Score 1)

There is no way you can control every box on a university network. Texas A&M uses their firewall to block all incoming connections on everything but port 80 and allows all outbound connections to go through. The goal is to limit outside access without imposing too many limitations on the users behind the firewall. If a system has a need for other connections the to be let through then it must meet university security requirements and be certified by a sysadmin.

Texas A&M uses the drawbridge firewall package. It can be found at http://drawbridge.tamu.edu