I worked in a DPI/firewall company and my work ran on the ASIC accelerator, so nah, my 'guess' is probably better.
FPGA is not worth the trouble. You get neither the (line) speed of ASIC, nor the flexibility of running everything in the CPU. Most serious DPI hardware vendors have stopped using it.
But you are right that it's no fun trying to workaround ASIC bugs.