Avoiding Complexity Risks with Next-Gen Firewalls
An Algosec study showed that 56% of respondents who deployed NGFWs said it increased their workload. You can take steps to reduce the complexity level, though, and this article can get you pointed in the right direction to do that:
http://continuitycentral.com/feature1087.html