>> I don't know much about it, but I've read that a hardware firewall
>> is supposed to provide more security, at an added cost.

> Hardware based FireWall appliances are far better then software
> FireWalls and don't hog resources.
>
> Even a NAT Router with simplistic FireWall constructs is preferred.

Outbound protection only though.

> Such devices can also be monitored with software such as WallWatcher.
> http://www.wallwatcher.com/