I have deployed about 30 mikrotiks and I disagree with "feature rich, supported and easy to use"
feature-rich: so many features are half baked. Like openVPN only supports TCP for transport, so you end up running TCP on TCP, which is bad.
supported: the documentation is poor (although getting better now that they have a wiki), working examples are hard to come by since there are so many versions of RouterOS and each introduces different bugs and breaks different bits of functionality. The mikrotik people on the forum are at best surly.
easy to use: I have had to do so much trial and error only to find out the specific piece of functionality I am trying to use is half baked.
I've had good experiences with Watchguard VPN products - which use open VPN under the hood. so any decent openVPN based product is probably what you want.