cwk9 is absolutely correct. A firewall is only as good as it's configured.

I personally use Kerio, and love it.

You might want to check out this thread: http://www.antionline.com/showthread...hreadid=232440