In Client Mode:
+ Uses DHCP on the public interface - can move it around the internet
+ Logs on w/ a single userid/password and IPSec Group so no end user intervention
In Network Extension Mode:
+ Can deliver a corporate subnet anywhere in the world for quick office activation
- Must trust the devices attaching on the private lan side - e.g. cannot set an filters to allow by MAC address.
- Does not support PPPoE yet
+ Fits in a briefcase
- Would be nice to require a userid/password web page for owner to login using other credentials.
- Nothing appears to prevent the box being stolen from your office and re-connected at a hackers home internet line.