I have used an appliance firewall from www.intrusion.com (one of the PDS series). They are pretty good.

You can use a checkpoint management console to set the rules on it. You can also set routes...