I've used Cisco PIX 501 firewalls extensively, primarily for mobile-user VPN boxes. They are easy to set up and work well for a relatively small number of users. Feel free to email me if anyone has questions about this solution.