Seems it all ended without any real clearification. Astaro is both a firewall and a router, it has a HA option. this makes it perfect 4 us. BUT many people who need HA needs it more than one place. Our links and most of the fiber links in norway are now delivered as ethernet (containing just a fiber to copper converter). This is without any router. Then you get a bunch of ip's and you get the ability to adertise your ip's via whatever connection you prefer (ospf/bgp/rip etc). In this case I need to get HA on both FW and routers in front of FW (they handle ospf and bgp). The whole point of HA solutions is to remove any single point of failure.
The point is that 4 most users it will be 2 boxes of the same type that handles both routing and firewall (eg. Cisco router with PIIX sw). In order to compare ASL and other solutions they must have the same basic functionality. (Meaning adv. routing and firewalling).
If ASL is not a router then remove the routing and make it a filter only firewall (bridged mode or something).
I hope this made any sence to you guys .. [:)] Thanks 4 your time.