For purposes similar to those you describe, we use a variety of Netscreen/Juniper products from the 5GT to the 208.