I agree with you. However you have to consider the political issues. If there is any kind of security breach, management and auditors may want to know what type of hardware was used. If you go with your Pix or Checkpoint implementation you cover your rear end if anything goes wrong. I've been using Linux since 98 and it's slowly creeping into the enterprise. I'm a consultant, and I've had the opportunity to move around a bit. Linux is doing well in the server market. I doubt you'll get management to buy into a Linux solution unless you provide examples of other users. Do you have a vendor contract with Redhat or Caldera? It might make it easier. Try SE-Linux. Management might go with a firewall implementation backed by the NSA. -Clarke-