For that matter, there's also ANS+Core Interlock as a complete
My company has just contracted TIS to do the installation after some
exhaustive research of a bunch. We've found the TIS folks to be
extremely reasonable in price (they also will vary price based on
existing client expertise) and the most flexible with regard to platform.
We happened to have some surplus Sun's and were more than willing to
help us work with them... They're also correcting some DNS problems
along the way, much less security specific issues...
And no, TIS is not restricted to dual-homed implementations. We're
using a classic 2 router/ bastion host approach. The nicest thing I
just learned only today is that the TIS architecture allows our
very large network requirements to expand by adding more bastion hosts
if needed !
My vote: TIS...