Check out the netscreen range of firewalls (www.netscreen.com), they perform well and are fairly easy to manage.