Firewall replacement

["Kellogg, Brian D." <bkellogg () SBU EDU>]

We are beginning to look at replacing our Sonicwall firewalls.  My experience is mostly with Cisco Pix, which were rock 
solid, and older ASA code running on Pix appliances.  Are the new ASA appliances as stable as the old Pix boxes?

Our needs are simple; stateful firewall, User VPN, site to site VPN, and a handful of SSL VPN connections if possible.  
I prefer appliances, but am open to any suggestions.  Platform stability is my greatest concern.

Anyone out there running a Linux FW appliance like Vyatta?  If so experiences and feedback would be welcome.



Thanks for any suggestions or feedback,
Brian