Hi Screenie,
thank you for your opinion.
I know that ScreenOS is alive at the moment. But I feel that the days for ScreenOS are counted. I came from IOS to ScreenOS long time before I knew who Juniper is. And so I'm thinking until today that the best from Juniper is ScreenOS.
I tried Junos too, but the feeling is not so good. I hate this CLI-hierarchy and I can't migrate some clients without open problems to Junos.
And so I can't not sell a new Juniper SSG with ScreenOS and the important feature "Convertible to JUNOS = No". This is not honesty to the clients.
But thank you again for your words ... it helps me to find out what is the best way for me.
May be I'll go back to Cisco / Checkpoint for Firewall / VPN.
May be I'll try Junos again after I found it more friendly.
Oliver