Before answering this question, we have to understand the business case which depends on many factors
Firewall position in the network, for example, but not limited to Internet premiere or data centers.
Services design for example: multi-tenant, virtual or physical…