It was just that you were trying to compare apples to apples in terms of features instead of functions, so a technical salesperson from Astaro could help you.
My guess is that Astaro IPS does 'ingress traffic policing' but I like the idea of adding 'egress traffic policing' for some types of customers like schools.
Several quick thoughts... IM anti-virus would be a nice touch. Why (rhetorical question only!) would an Astaro need SCCP? Astaro has no WAN interfaces, just Ethernet. I think it does OCSP, but SCEP would be nice, too. Your first three items are what made me wonder if you had an opportunity with a large federal agency - certifications that aren't done until there's an extremely-large contract in the offing!
Thanks, these are all great thoughts. I hope Astaro answers some things for you and listens to several of your ideas.