I've found that the newer SMC routers will do everything that you're asking. We have a $2500 Sonicwall firewall at work, but I've found the $40 SMC router I have at home does the majority of the things that the Sonicwall does: URL blocking, port forwarding, virtual servers, etc. Not a bad firewall at all for such a low cost device.