I just read that it is recommended to have a hardware firewall as well as a software firewall for each machine on your network. Other than hardware failure or wanting the option of moving a machine to another network and still being secure, why would you want to have a software firewall if you already have a hardware firewall?
