There's a number of devices on the market that will do this also.. a lot cheaper than a Cisco solution
Fortinet for instance.. (which I believe is based on OSS)
http://www.fortinet.com/doc/FGT50_100DS.pdf
these units are reasonably priced and can perform quite a number of functions..
Firewall, VPN, True DMZ interfaces, Dual WAN interfaces, Spam filtering, AV Filtering, Web Content filtering, and MORE !
Just something else for you to look at.
I run one of these in 'inline mode' it sits Between my Cisco router (Border) and my Checkpoint Firewall and handles the Anti-SPAM, AV and Web Filtering a lot cheaper than Checkpoints subscription for those same services. in inline mode the other deices don't realize it's even there..