Looking at this product's specs, I'd have say this is too little too late and very expensive. Non-modular means no real intelligence in the packet filtering ala IDS/IPS. Where's the Anti-X? This is a last place product (again) behind Check Point and Juniper. I'd hate to be working in the Cisco "Security" side of the house and have to sell this latest batch of crap.

Just use a router with an ACL and save yourself a ton of money.