My router does have built in firewall protection which works well for protecting against malicious inbound packets but I like having an internal firewall such as ZoneAlarm to monitor malicious outbound packets so if the anti-virus software misses something at least I can see and / or choke off suspicious outbound packets.