The main issue is that using active X some sites and emails can have embedded scripts that can open ports and affect the security of a PC driven firewall.

Using a hardware firewall (software firewall in a separate box) any scripts running on your PC have no ... Login to read more.