Firewall VS Router

I need to set-up a small office to connect 10 clients to a database. The database supplier told us that we have to get a router and a firewall. I thought that a router is a firewall. They suggested using a Cisco Pix 501. Can I get just one box that does both? I need VPN and state full inspection as well. All suggestions are welcome. Thanks!