Plan your evaluation
Write down the workflow, systems, operating owner, and evidence needed to make your decision. Use the same scope for every supplier, and ask which parts of the demonstration are included in the proposed package.
Access and segmentation
Map representative users, services, and network zones. Test required connections and an explicitly disallowed path before expanding a policy.
Traffic inspection and detection
Define where traffic is visible and what cannot be inspected. Include encrypted traffic, remote users, and the evidence an analyst needs to investigate an event.
Policy and availability
Walk through a policy change, approval, deployment, and rollback. Test failure behavior and record how operators keep essential services available.
Questions to ask
- Which traffic paths and environments are covered?
- What visibility is lost when traffic cannot be inspected?
- How do we reverse a policy that disrupts a business service?