I ve posted before about Watchgaurd it is not a bad product but for only $300 you can get a better product with checkpoint fw1 installed its called sofa box get details at
http://www.s-box.com . I havent heard to much in the way of watch guard vulnerabilities but since it only does dynamic packet filtering im sure its vulnerable to DoS attacks ,like teardrop and smurf. Watchgaurd is basically and armoured linux embedded firewall appliance or a LEAF.

Not the best product but good for soho


EviL