CheckPoint are expensive - they're the "big boy" of firewalls and VPN, but tend to "oversell" product to you. However, if you need dozens of firewalls with thousands of users, then they may be worth a try.

If you're a bit smaller than that, take a look at SonicWall instead.