Port and protocol are not necessarily the only way to implement whitelisting. A solution like Little Snitch is a step in the right direction concerning network

Port and protocol are not necessarily the only way to implement whitelisting. A solution like Little Snitch is a step in the right direction concerning networking in my opinion. Which application is opening the connection is just as important as the destination. An enterprise version of such a program could allow network admins to set rules for different users and help spot unfamiliar applications that are acting suspiciously. Firewalls aren't dead, they will just become better at inspecting traffic and classifying applications. A higher degree of security is achievable, the only question is if customers are actually going to demand well engineered products. Until then companies are going to cut corners in order to out-compete each other.