As a side note, how is HIP going to allow port blocking? Will it avoid worm attacks by its puzzle mechanism. I don't think it is possible (but it can reduce its spawning speed.)
You can build a HIP firewall that uses HIs as the level of granularity. Beyond that, on the port level, you have to do locally at the host. But that's the right way to do it anyway, IMHO. The current worms and other internet fauna are a problem that SHOULD NOT be handled at the network level but by the operating system.