Using both hardware and software firewall solutions together is probably better than relying on a single solution.Hardware firewall is better of course, but the advantage of a software firewall is that you can give internet access permissions on application-level.
