Successfully completed a network segmentation project using Fortinet FortiGate 1200D firewalls and Cisco Catalyst switches based on a 10-Gigabit infrastructure. The PCI Zone is set up within it's own virtual domain (VDOM) and heavily relies on Bomgar's Remote Support (private cloud) product to lock down internal access to this secure environment.
I would get approval for the hardware and licensing much earlier to avoid implementation during the PCI audit cycle!