"Now if your needs are 25Gbps through your firewall I don't think that you could do it using only one ASA so you would either want to see if other vendors indeed support the speeds they say or evaluate an active/active or multiple ASA5580 solution, potentially with jumbo frames"

The problem with this is that if your test also involves IPSec VPN termination, then you can not do this on ASA Active/Active configuration whereas other vendors can do this. Most firewall vendors such as Palo Alto use clustering technology to increase throughput performance by adding additional

hardware.  In other words, you can combine 8 different nodes into a single system and can terminate VPN as well.  With Cisco ASA technology, you can

only have two node to Active/Active but when you do that, you lose the ability to do site-2-site IPSec VPN

To the original poster, how do you manage these Juniper firewalls?  do you use Netscreen Security Manager, NSM, to manage these boxes?

@pkampana, from a customer point of view, pricing is the criteria where apples can be compared with apples if the features are same. If a single box of other vendor can outperform ASA, why should i go for the pair of Cisco ASA?  All the tests that you have provided do not compare apples with apples in terms of the cost associated with each box.

@ cciesec2011, We currently do not have those firewalls, however they will be on JunOS and i guess JunOS is supported on NSM.

I am not trying to sell Cisco products here. Just wanted to provide some specs and comparison by a third party.

I see your point about cost.

To me "apples and apples" are performance specs by category and name speeds because they are more objective. Price has more tangible and intangible things people might or might not appreciate tied to it.

PK