Both types rely on software to operate...
One is easier than the other to update, modify & break.
An example of an embedded firewall is
LEAF
It's as close to a hardware firewall as you can get if you use a DOC rom with all the advantages of a software firewall.