You don't want users to play too much. You want distributed firewalls and products and that don't need a lot of human interface. With hardware, you don't need to worry about support, upgrades, or patching. The software is still on the high end but appliances make it easy to fit in,