Ok guys, enought with this thread already. Usually the the choice of firewall is often dictated by the management in terms of price/performance
If you have the buck and security is foremost , go get yourself application proxy firewalls like cyberguard, gauntlet, bordwareware, sidewinder. If not just go for the plain vanilla stateful firewall e.g. checkpoint, pix, sonicwall, watchguard, netscreen .... I'm outta here. ----------------------------------------------------------------------------- "My statements in this message are personal opinions which may have no basis whatsoever in fact."