Pix:

- Cisco technology running on Flash,

- troubleshooting tools are very limited,

- Configuration and maintenance is very complex and a waste of time,

- no centralize management. CSM is not a mature product,

- Excellent TAC support, second to none

Nokia:

- Intel architeture with IPSO Operating System.

- Checkpoint is the Firewall software running on top of IPSO,

- excellent troubleshooting tool with tcpdump and "fw monitor",

- very easy to configure and maintain,

- excellent centralize management system with Provider-1 and Horizon Manger,

- the downside is that if you have issues, you may endup with

finger-pointing between Nokia and Checkpoint.

- Checkpoint seems to have better SmartDefense protection than Cisco

Both Cisco and Nokia use stateful technologies.