MS Proxy or Hardware Firewall

At present i have 20 users accessing the Internet through a NT4 server running MS Proxy 2.0 which is setup in its own domain with a one way trust. My question is whether 1. This set-up is adequate.
2. I should change this configuration for a Hardware firewall direct into my main domain 3. Or whether i should implement a mixture of both.

Any suggestions appreciated.