Besides using a VPN connection when using a public WIFI, what other precautions should I take?
Let's say I'm connected to the WLAN but not surfing the net, is Windows firewall enough to protect me?
These articles have some suggestions:
Public Wireless Networks
How to Stay Safe on Public Wi-Fi Networks
How to stay safe at a public Wi-Fi hotspot | Ars Technica
Network Location - Set as Home, Work, or Public Network
You should change the network setting over to Public if you plan on connecting with a Public network as this automatically secures your system. Yes Windows firewall is enough. :)
Choose Public network for networks in public places (such as coffee shops or airports). This location is designed to keep your computer from being visible to other computers around you and to help protect your computer from any malicious software from the Internet. HomeGroup is not available on public networks, and network discovery is turned off. You should also choose this option if you're connected directly to the Internet without using a router, or if you have a mobile broadband connection.
Quote