ZoneAlarm's "Threat Emulation" looks like an interesting zero-day feature. But I don't think it was tested in this review.