We do it on our SQL 2005 servers. Used the SCW to make a baseline basically and then imported it into group policy so all SQL servers get the firewall enabled.