We have an SSG-140 by Juniper (similar to a netscreen 25, just a newer version of ScreenOS and more physical ports).
I find setting up new VPN profiles to be a PITA. I have to follow a bunch of steps, test it out, etc etc.
I find running an SSH server is easier as far as new user set up (e.g. the user accounts are in active directory, and there are other easy tings about it.)
I really prefer the IPSec VPN, and prefer that the netscreen do all this work.
Currently I just have three VPN clients (one using a PC client, and two using dedicated netscreen boxes). I would like to support 3 more dedicated devices and a few more users.
How can I make this easy as pie to administer and manage?