Built in firewall? Sort of. The ABS performs what's called Network Address Translation or NAT, which helps protect you from the bad guys by hiding the fact that there are computers behind the public IP you get from your ISP. On the other hand, it's not a "real" firewall, in that it really doesn't pay attention to sources and destinations and filter them per rules.
Is it any good? What are you refering to, the AirPort Base Station or the form of firewall protection it provides? I think both the graphite and snow ABS are solid wireless access points with some really good features, though you can get access points and wireless routers for less money, and generally with more features-but not with a built-in modem! The NAT protection is solid and reliable, but you should always run an antivirus program, and running a software firewall isn't a bad idea.