It's possible that multiple firewall devices could have their LAN sides facing together (i.e. inwards), to provide high isolation for a secure inner LAN core. With one of them providing conventional WAN protection via NAT, the other(s) secure outbound access from LAN-side systems, on a per-port, per-device, or ad-hoc "VLAN" basis.
Because each inside device now sees the 'hard' side of a firewall, this can help prevent the likely and instantaneous cross-contamination of the whole LAN in the case where a LAN connected device is/becomes compromised.
When implemented with inexpensive commodity routers, this arrangement is essentially a cost-effective way to deploy a version of the port security feature only found in high end (i.e. Cisco) routers bearing 5-figure price tags. At one router per port though, costs add up quickly, so this only makes sense for small SOHO or high-end home networks.
Outbound firewall protection is increasingly important these days due to BYOD scenarios as well as a rise in router-targetting malware attacks. Router configuration attacks especially can be radically reduced in the setup described above, by setting the router configuration interfaces to be inaccessible from "outside" their respective firewalls--i.e. not available to the port-connected device.
Without going too far afield, even beyond BYOD, outbound port control is ever more crucial as trust in device-bound software firewalling erodes. Misconfiguration, UPnP port-opening, obfuscating complexity in the firewall UI, "default-allow" outbound policies, silent reconfiguration by installer software, and end-user meddling are long-standing concerns. But now these are compounded, in the latest versions of some operating systems, by hidden ipv6 auto-tunnels (used for telemetry, advertising and marketing functions that sometimes can't be disabled) and/or flagrant OS-privileged firewall bypass modes. Of course software firewalls, being commingled with the device they are supposed to protect, offer dubious security at best, but these new considerations seem to now suggest they're fully pointless. Facing each LAN device to an outwards-facing hardware firewall renders device-bound firewalls and their myriad problems moot.