Have to agree with Mac (again)
on this.
One advantage of a hardware firewall is the ability to block specific domains - so if I see the boys on a website I deem unsuitable, it's a simple matter to block it on the firewall.
You can also obtain lists of domains that can be added in bulk. I have gradually added a raft of domains connected with advertising / tracking.
SD