They call this a "hardware firewall" but since it's running on top of the OS, it's really a soft firewall with (purported) hw acceleration.
I wouldn't expect it to be any better (likely worse) than ZoneAlarm, et. al. (possibly OK for personal or laptop users, but not an enterprise solution, to say the least.)
I've evaluated it as a solution for roaming laptop users, etc... had numerous issues with Wireless NICs that they could not seem to figure out. Neat concept, just isn't ready yet, in my opinion.
Oh, and forgot to mention... the feature set isn't nearly as rich as the Astaro; but it would be a good thing to use for those roaming users that can't lug an extra system with them on the road (I do consider it to be more effective that say, Zonealarm for example)... except for the numerous issues I encountered with their special traffic redirection driver and Wireless NICs.
