I was on a cloud project where the customer needed a firewall appliance and went with Palo Alto and (thankfully!) hired another professional service team with an engineer who was dedicated to working on PA, that was what he did, and it was magic how good he was at it