Additional TPC/IP stack

An NT based firewall I've been reading about is marketted as using an
additional TCP/IP stack, which performs additional checking before
transerring the packets to the native NT TCP/IP stack. (The firewall in
question is Cisco's Centri) My questions are:
        Do you feel that such additional checking in an ad hoc IP stack is
valuable?
        What kind of additional checks would make sense?
        Is this a valid/reasonable approach or is it just hype?
TIA
-------------------------------
Franco RUGGIERI
Via Francesco ACRI 24
00142 ROMA (Italy)
++39-6-5430326
Cell: 0368-3147231
fruggieri_at_selfin.net
Received on Nov 07 1997