[j-nsp] Juniper firewall that does HA, "contexts" and VPN?

[Martin Barry]

So, we're a Cisco shop but we need a firewall that can handle both
"contexts" and VPNs (which it appears ASAs can't) and be run HA.

Basically:

- redundant pair running HA
- IPSEC and PPTP VPN termination on a single external VLAN
- separate ACLs and routing for each customer which dumps them into their
  own VLAN
- must handle overlapping RFC1918 subnets at remote IPSEC endpoints


Anyone have any recommendations?

Marketing and sales people hold off for the moment, looking for operational
advice here.

Many thanks
Marty