It sounds like the requirements were never really spec'd out. Why not specify the top 10 requirements, and then run a test/ runoff/review of the two proposals. The one that meets the 10 requirements the best should be the winner.
--Paul Hoffman, Director --VPN Consortium