I think what you need is a multi-layer defense system.
The first layer is the firewall. Then, as internal defense you can use antivirus sofware, anti spyware, filters, good web browsers, good e-mail clients, DropMyRightsâ¦
If your firewall and settings are good enough, your antivirus will...