you have something that can run with low to mid range Cisco/Juniper
Even low-end Juniper kit does more than basic packet filtering .... does your Tomato have any ALGs ? Can your Tomato do "apply-path",candidate configs, "show | compare", "commit confirmed" and rollbacks ?
Tomato is probably better than a cheap Cisco, but better than a Juniper ? No way !