Kerio, hands down. It's never failed me once, contains all the features I need in a firewall (and not all the OMFG web filterintg banner blocking email protecting baby feeding FEATURES(?) that should not be in a firewall).
Roger that one, pooh sun tzu I love the built-in IDS and it's overall effectiveness. It has never failed me either and I doubt it will