It would be cool if you could get the firewall to perform a network and host discovery on it's different interfaces.
Example would be that I have a number of static printers I would like to create policies for. It would be great if it can either discover objects or I point it to an ip address and it tries to find out what is on it.