I have been very pleased with the operation and administration of my SonicWALL T-170 appliance. About US$200/year for gateway AV & anti-spyware, Global VPN clients, deep stateful packet inspection, daily updates etc. Basic box was US$500. It was purchased as an easier alternative to ISA, but using the 2-NIC system (it replaced a D-Link DI-804HV VPN/Firewall) we have the option for installing ISA in the future.