> OpenVPN and load-balancing might also be possibilities.
Indeed, load balancing and/or high availability would be very nice.
Another very interesting feature would allow an administrator to
manage a bunch of firewalls using a single web interface, instead of
having to log on each firewall and implement a local set of rules.
My 2 cents