So its been a while since I was on this site. I'm still using Firewalla Purple and happy with it. So I have my Firewalla connected to my Frontier modem upstream and downstream to a smart switch. From the smart switch I have two APs attached: One my Asus AX88U (configured AP mode) and the other my Netgear wifi AP WAX620. The later Netgear is VLAN capable while Asus is not (and I have 2 VLANs so far on it for Private discrete networking and Guest). The Asus AX88U has an AX68U in mesh mode on other side of house. The Asus APs are for IoTs, video and security cameras in different groups on Firewalla. As router Firewalla Purple allows 5 VLANs and a separate wifi discrete network as well. So to answer your question only the Firewalla is the hardware firewall and router I use. I do use Nordvpn in Nordlynx mode on computers but rely upon Nordvpn through Firewallas guest network (and server network) in openvpn to protect everything passing through WAN. The primary reason I rely upon Firewalla is the ability to see every client and network as well as the ability to block activity that occurs. Firewalla does send notices as clients upload and download anything. I'm sorry to say my experience with Asus is as a "blackbox" relying upon an outside agent to protect the user, while not knowing or being transparent about what that agent was doing or blocking. Since I am not as sophisticated as most on this forum I need more help and transparency.