I'm biased for the Cisco PIX. I run a redundant 525 pair at my core edge and several 520's out in the field as remote VPN terminators.

However, as others have pointed out, I believe any of the 'major' appliances will get the job done for you in more than adequate fashion.

Cheers,
<0