Practices that matter: named change tickets, object naming, disabling unused VPNs, MFA for admin access, and firmware that is not years behind. Vendor brand (Fortinet, Palo Alto, Cisco) matters less than whether anyone owns the policy.
GirjaSoft can review policies as part of cybersecurity or network support.