Good, but the author forgets to mention the one reason why you should have a desktop firewall, even if the client is connected behind the corporate firewall:

Isolation.

You isolate all other clients in the network from a mobile that may have been exposed to a public or maby a customer network ...

[ more ]