There's no one size fits all. A good packet inspection firewall with IPS with application firewall (or application proxy really) and URL filtering with antivirus and antispam, WIFI, DLP (data leakage prevention), log monitoring and inspection, NAC and so on does not really exist, whether you want to buy or make one.
It really can't. -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk "This officer's men seem to follow him merely out of idle curiosity." -- Sandhurst officer cadet evaluation. "Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted." -- Gene Spafford learn french: http://www.youtube.com/watch?v=30v_g83VHK4
