A device to run an ISP controlled firewall client-side?
Why not save the cost, bandwidth, and hassle by simply having the firewall ISP-side?
I'm not talking about forced ISP filtering/blocking, - and for those that don't just want a safe default setting, full client access to control those rules must be provided.
The further up the chain you firewall the better. Most of us here could easily DOS a home DSL connection from some of the servers we run. Stop the packets before sending them to the client, and everyone wins.