Best suited to carriers, large enterprises.
Good first effort, but needs some work.
Most vendors tested keep things up and running.
Minor glitches dog vendor implementations of RADIUS and LDAP-based authentication ties.
SSL VPNs make the user front end as friendly as possible.
Tests look beyond the GUIs for deeper administrative tools.
It works best when you don't need it.
Picking and choosing features from among the top tested products.