Agencies have decisions to make when it comes to next-generation firewalls due to budgetary and mission constraints.