My Cisco 5525s are going end of life end of support next year so I’m putting pressure on management to replace these devices sooner than later as my Cisco umbrella sub expires this year too. Over the past 2 years I’ve grown a hatred for Cisco and currently reviewing Palo Alto and Fortigate (as well as netgate). When talking to Palo to size the gear, they only seemed interested in talking about the 1 gig hand off vs 2.5 or 10 gig. when i told them i had 1 gig hand offs, they tell me i need the PA-400. There was no discussion around total number of VPNs, web inspection/filtering, IDS/IPS, etc.
Question, anyone know if this is normal? does palo over power their devices so much that the amount of work its doing is not relevant?