Our company is about to purchase a new firewall, and we've narrowed the field down to three vendors. What criteria should we use to evaluate the finalists? Are there best practices for choosing the right enterprise firewall product?