TMG is a fully featured firewall, more comparable to a Cisco ASA device... which is what we are now re-jigging our upgrade plans for.