I have been checking out several firewall products i like the sofa box
www.s-box.com , this is a checkpoint small office product that includes the statefull inspection engine , with a built in ids sytem for $300. This box is awesome from what i see it seems to be a simpler way to filter sites add rulesets and filter traffic .The sofabox as it is called is Opsec compliant meaning a Box running checkpoint will be able to modify rulesets.
essentially s-box is a modified version of bsd with checkpoint on it .Yet another great product is trend micro's secure point which is a firewall linux os the can connect ot windows based management stations it has a built in vpn and virus wall for personal use it is free i dont have any specifics on the price it also uses staefull inspection . A good one for the home dsl /cable modem user is LRP linux router project Freesco at www.freesco.org it uses a dynamic packet filtering engine and a great web interface plus it fits on a floppy will run on a system with a 66mhz processor and 16 mb of ram and no hard rive yes no hard drive this of course is freeware.

PeAcE