Good advice... I run software firewalls at app level only, Hardware firewall on the Pix and software filtering via ISA server/proxy...
+ the good old antivirus (etrust) and spybot, spywareblaster, adaware, spywareguard and regwatch.
The internet can be a very dangerous place now a days !