Currently, I have a couple servers running freebsd. I use IPFW to block out a lot of what I consider "bad" traffic.... but I have to update one, then the other... messy.

I want to get a good firewall I can put infront of all my servers, if possible. It would be cool to have it detect DoS and such. But I also like the way I can block IP addresses in IPFW.

I started just poking around eBay just to see what is out there, and there are a lot of fairly inexpensive Cisco PIX 500 and 501's- but I have totally no idea if these would do what I want and if they are easy to use (I an not all that net-savvy!)

I have no idea what it is I am looking for. Can someone point me toward what I need?