Yeah, the hardware firewall option is looking the best for me. I think it would have the less latency of all and if it ever fails, I can put an ACL on the router until I could replace the firewall unit. Again and again, Thanks to all for some of the best ideas.