That is exactly why I like the Pix, it's a defacto standard and the syntax is well documented in countless forums, web sites and books. And if you are inlcined the cost of a SmartNet subscription gets you world class cisco geeks at any time of the day. HOWEVER, if you are using a VPN for remote access... the Watchguard is very cost effective. Especially hardware based. Cisco VPN licensing is way too expensive, at least last time I checked. And to get the same kind of interface you have to license Cisco Enterprise Manager, which is very nice. The newer Pix boxes might even be easier to use, mine are a few years old now.