Hi everyone! I'm helping a friend who's the IT lead for a mid-sized retail chain plan their 2026 firewall refresh. They're at about 100 users now but are expanding. We're deep in the evaluation phase, and the shortlist is Cisco Firepower (likely 2100 series), FortiGate (like the 600E), and Palo Alto (PA-400 series).
My natural inclination is towards the ecosystem I know, but I want to be objective. For their use case, the key needs are:
* **Solid SD-WAN capabilities** for connecting multiple stores reliably.
* **User/application-aware policies** to lock down POS systems and guest Wi-Fi.
* **Threat prevention** that's effective but doesn't introduce latency during peak sales hours.
* **Manageability** by a small, overstretched team.
I've built a comparison matrix focusing on operational details, but I'm keen to hear real-world experiences, especially around these points:
* **Firepower Management Center (FMC) vs. FortiManager vs. Panorama:** How steep is the learning curve, and how stable are day-to-day operations? I've heard FMC can be... particular.
* **Total Cost of Ownership over 5 years:** Licensing nuances matter. Think Threat Prevention vs. Enterprise Agreement vs. FortiGuard bundles.
* **Performance with SSL Inspection enabled:** This is a big one. Any throughput hits or stability issues in a retail environment?
* **Integration with other systems:** They're evaluating a new CDP. Any direct experiences with API integrations for logging or policy automation?
If you've rolled out any of these for a similar distributed retail/branch setup, what were your biggest "oh, I wish I'd known that" moments? I'm especially interested in deployment templates or checklists you found invaluable.
Looking forward to the discussion