[c-nsp] replacement for 1812

[Nasir Shaikh]

Hi,
We started rolling out a global DMVPN solution for 600 sites. After 250 sites over 18 months, our router of choice for small sites- the 1812 is EoS. Recommended replacement is 892 but feature navigator shows that this does NOT support the combination of the following features:

DMVPN phase2
Zone-based Firewall (ZBFW)
EIGRP stub routing
AES

Even the 1912 does not seem to support the combination of these features.

Any ideas? 
Anyone with experience with 89x or 19xx series with DMVPN, ZBFW and EIGRP stubs?

Appreciate all feedback.

Nasir Shaikh