Both incoming and outgoing. Also for file-sharing programs, one firewall only is recommended. Two firewalls have a tendency to clash with each other.
Normally when you give an exception it will include both. Norton I am not sure about.