One thing I've learned from testing the latest crop of firewalls: Don't believe anything the vendors claim until you've tested it yourself. This means things that "ought to work" or "used to work" may not work at all, or may not behave as you expect.