ive tried zonealarm , im not sure how tuff it is but it gets good reviews from every pc mag, though its more for just home users.

i agree with the 'windows disservice' post, run a linux box like rj and use it as the entry to the network from outside.

im to lazy to have any kind of protection (virus or firewall) on my pc, i dont have any sensitive info on it and i format it to often to care about viruses