Hello,

> OpenVPN and load-balancing might also be possibilities.

Indeed, load balancing and/or high availability would be very nice.
Another very interesting feature would allow an administrator to
manage a bunch of firewalls using a single web interface, instead of
having to log on each firewall and implement a local set of rules.

My 2 cents
Amaury