I'm using ZoneAlarm Pro for many years and I love the Expert firewall features, fits my need for securing local network (under a router) including IP/subnet/gateway restrictions for remote desktop access, print server, ftp server, web server etc.