DSL routers w/ firewall – effective?

I know of several businesses that have DSL routers with the firewall option turned on and NATing. Is this enough protection against hackers and malicious viruses? Security wise, wouldn’t it be more effective, i.e. better protection, to have a firewall, either hardware or software based, sitting between the DSL router and the internal network?

Thanks,

Minina