The linksys line of SOHO routers is probably what you are looking for. It does SNMP logging so if you configure
one of your workstations to trap the logs (configuration on the router for SNMP logging verbosity is in a secret spot, just look for it in google or do it through telnet). It also does keyword filtering. If you don't link linksys because of its bad name on PC NICs, go ahead with a Netgear. However, I feel that D-Link router/firewalls are not at all robust. One I had was really flaky whereas ive tried both netgear and linksys versions which provided 100% uptime.