When I found myself stuck with NetScreen, in November of 1999, having come from a PIX environment, I pretty quickly built a shopping list of things that I felt they needed to fix or, in some cases, implement. I stumbled across my list around September of 2000. At least 80% of the items on my list had been addressed and resolved, resulting in a substantially more mature product.
It's almost two years since I last had access to a NetScreen; I'm working with CheckPoint's FW-1 these days. So far, I've seen little in the way of extra benefits to offset FW-1's greater complexity and fragility. David Gillett