At work we use watchguard x700's as gateways and blink from eEye for desktops.

http://www.watchguard.com/products/core.asp
http://www.eeye.com/html/products/blink/index.html

The X700's are basically customized linux boxes, are extensible easily maintainable and offer several flavours of VPN...we use both branch office and Mobile user

blink provides desktops with application and system level softFireWalls as well as antispyware, antiphishing and "Protocol based intrusion prevention" which basically offers zero day protection

At home, a watchguard SOHO and an f-secure suite from my cable provider