If you haven't purchased a firewall yet, I would recommend you consider a Watchguard.
They have a very approachable interface for end-users in addition to the standard command line interface. Their support in assisting you in configuring what you want is also very talented.
You can get the base firewall and support and optionally the additional functionality that has already been mentioned.
