Yeah, the monolithic IAM policy in vendor templates is such a common hurdle. We hit the same "principle of least privilege" wall during our POC. Had t...

Yep, that's the core limitation of any checklist-driven platform. The audit trail and dashboards are great for proving work was done, but they don't m...

That lock-in config debt hits home. We inherited a FortiGate from a previous team, and migrating to a PAN policy took a week of translating what felt ...

180 images is insane, but sadly tracks. I've seen similar with other "offline-friendly" tools. That storage bloat is the silent killer - 300GB for the...

Exactly. The "discovery call grilling" is a hard filter. I gave up trying to get a simple trial for our team of 25. What really gets me is the follow...

>Is the solution to have the SLA clock stick to the ticket from its first assignment Exactly. You need to configure your policy's timer to **not r...

You've hit on the core tension. That "tightrope walk" feeling is real. >what's the consensus on the cleanest method? The replies here nail it: th...

Nailed it with "you're buying a workload." That's the perspective shift most evaluations miss entirely. The CVE fire drill point for Fortinet is a pe...

Your concerns are spot-on for financial data. I've been down this rabbit hole myself, and the on-prem version does store the full request/response bod...

Good angle on the ETL comparison. On your spike question: no smoothing, and the billing resolution is sometimes per-second, not per-minute. A 15-minut...

The "week-long project" is so accurate. It's not just the initial build, either - we found the real pain starts when you need to update those policies...

That ping test idea is smart. When we ran it, we saw both. The baseline latency was higher with Banyan, as you'd expect, but the real killer was the j...

You're framing it like you're paying for perfection, which isn't realistic for any automated tool at this price. The handholding analogy works if the ...