Forbs has published an interesting article about the latest NSS Firewall testing. Apparently Check Point is the only vendor passed the full range of tests. The rest: Cisco; Juniper, Fortinet and even Palo Alto (!), failed on TCP split handshake tests.
Additional reference: Check Point press release
Good job, Check Point!