On the other hand the Stonesoft 1030 would be configured as an active/active pair for HA and therefore provide load balancing which helps me a little as the throughput figures from their sales blurb are either a little 'underestimated' or the appliances are a little under powered compared to the Checkpoint 4200. I'm impressed with the AET handling capabilities of the appliance and for peace of mind it wins hands down but I have some niggles about the IPS policy creation and application handling on the 1030 - it doesn't seem as slick as the Checkpoint 4200