Citrix Access Gateway v Firepass

folks

i want to compare the CAG v F5

i want an ssl vpn solution with the usual endpoint validation/protection, AV scanning, protected workspace for untrusted devices etc

anyone any experience or cag v firepass

i know the cag requires an aac box(es) and this adds additional complexity i don't want but i need more info

thanks to anyone taking the time to reply

i'm grateful for any links etc

thanks again