Not sure about all the software firewalls - but hardware firewalls are stateful packet inspectors.
Many of the new attacks go right through them.

P.S. We threw our WatchGuard out!