when you visit the site security web sites, you can be noticed there are a lot of ppl trying to own hardware fw/router
if you install one, you will have to look for patch every days

if the win comps have internet access, it will be very hard to stop intrusion by reverse connection

as user unknown said, you may have to look for commercial help