I think if I was to say something that could be improved, it would be a multi-data center nature of the implementation. Meaning, having an active-active data center with multiple entrance-exit points. I think that feature could be improved to provide a kind of anycast gateway solution into the functionality that would make it a lot more flexible and versatile. Maybe also making the solution a bit more like the NSX-T from VMware, more on the logical part of the solution, like micro-segmentation and the ability to have a distributed firewall across the whole solution, to implement it in an easier way than they currently do with the security aspect of the solution.
