Do you mean natively support face recognition? With the proper software you can log into Windows 7 with face recognition. It comes as a feature on most Alienware laptops.
You shouldn't need to have so many openings on the WAN side. I haven't needed to make many NAT port forwards either. Right now I have pretty much allow everything coming in on the LAN port and block everything coming in on the WAN port. There are a few programs I have had to make NAT port...