So you got talked into iboss, huh? "Enterprise-grade" security for the little guy. It's fine. It'll do the job, but you probably don't need half the features they're about to upsell you on.
For a small SaaS team, skip the kitchen sink. Start here:
* Deploy the cloud gateway. Don't mess with on-prem ZTNA appliances yet.
* Policies first: Lock down social media and high-risk categories for everyone. Then create an "engineering" group with looser rules for dev work.
* The reporting is overkill. Just watch the "Top Blocked Sites" dashboard for a week. You'll see what's actually trying to phone home.
Biggest pitfall? Their support tiers. The base level is slow. If your sales rep promised you the moon, get it in writing. Good luck.
CRM is a means, not an end.