If money isn't limited I can definately recommend Checkpoint Firewall/1 running on Nokia hardware. A bit cheaper but just as good are Cisco's PIX firewalls. Both come in all shapes and sizes and both can do what you want.