We had a WatchGuard FireBox II. What I remember is that it was rather easy to reconfigure. But the rules were not really what you call "numbered". There is just a pool of rules. Due to that, making complicated rulebases, where the order mattered, was just impossible.
Oh yes, I believe it could also be configured in "bridge mode".