I am struggling with where to place an MX SD-WAN on the network when I already have a L7 Firewall in place. It's initials are PA. I can come up with strong arguments for in front, behind and even as a hair-pin solution! Thoughts? Wondering what others are doing in this type of scenario.