I think having the firewall in the chipset is a very good idea, although would have a slight disadvantage with patching.

If the firewall is in hardware it means that it will not be able to be...