The most expensive sentence in network procurement is “let's just buy the best one.” I say that after spending 12 years handling network infrastructure orders for distributed enterprises. I've personally made — and documented — seven significant mistakes. They totaled roughly $43,000 in wasted budget, and that number doesn't include the weekends spent cleaning them up. Today, I maintain our team's pre-purchase checklist. I earned that job by making most of the classic errors first.
For years, I filled the phrase “the best one” with different words: “best cordless phone,” “best firewall,” “best router.” Same process, same failure. I started at the product page and worked backwards, instead of starting at the network and working forward. If you ask me, that wrong direction causes more rework than any defective device ever will.
My position is simple: prevention beats correction, especially when the correction happens after the hardware is already mounted in a rack.
In 2019, I was part of a phone refresh for a 300-person office. Someone on the project team searched for the “best cordless phone” and picked the model that won every review. The C300 looked like the obvious winner. We bought it, tested one handset on a clean desk, and everything sounded fine.
Fast forward to deployment: dozens of handsets, multiple floors, and a rising number of complaints. Calls dropped at the far end of the building. Voice quality became a running joke in the support queue (ugh). The hardware was not defective. The network behind it had no voice VLAN design, the access switches did not have enough PoE budget in the right places, and the firewall did not prioritize voice traffic consistently. Every one of those issues was predictable — if we had looked at the network before looking at the phone.
What most people don't realize is that business cordless phones are endpoints on your network, not standalone radios. The best review in the world won't tell you whether your LAN can carry the call. Under ITU-T G.114, you want one-way latency under 150 ms for a natural conversation. That latency is not created by the handset. It is created by the network path between the phone, the PBX, and the rest of the world.
The C300 was a decent product. It was not a solution. The fix cost us extra access points, switch upgrades, and around two weeks of delay — more than the phones themselves. I blamed the hardware at first. I was wrong.
People think a more expensive phone gives better call quality. Actually, a phone that costs more usually has a better radio. But if the network it connects to can't carry voice, it will sound as bad as a $20 handset.
Three years later, I repeated the same mistake with a firewall. This time, the device was from a vendor I trusted, and I was supposedly the experienced engineer making the recommendation.
We were refreshing security at the edge of several branch sites. I spent an evening on the Juniper SRX380 product page and felt confident. The platform had the throughput, HA support, and security features we needed. I ordered one configuration and assumed the specs would hold up for our workload.
The Juniper SRX380 product page is honest as far as it goes. What it can't show you is your traffic. It doesn't know how many of your sessions are encrypted, whether the site runs a noisy multicast application, or which security services need to run at the same time. Our first site had a heavier mix of decrypted traffic than the product page's headline numbers assumed. When we enabled the full policy set — IPS, URL filtering, logging — our performance expectation did not match reality. The platform was right; my selection process wasn't.
Here's something vendors won't tell you: spec sheets are measured in carefully controlled test conditions. Those conditions are useful for comparing silicon, not for predicting your office on a Tuesday afternoon.
That mistake cost us a second hardware order and an embarrassing change window (the kind that stays in the post-incident review forever). It was the same disease as the cordless phone mistake, just with a bigger invoice.
After two under-provisioning mistakes, I overreacted. In early 2024, I recommended a Juniper MX304 for a regional core location because I was not going to underspec anything again. The MX304 product page looked like the end of the conversation. It has the routing pedigree, the interface density, and the buffer architecture for serious edge workloads. It was also more router than that location needed.
People think a bigger router equals a safer network. The reality is that a bigger router often adds complexity. The MX304 does routing beautifully; it is not a shortcut for security design. The site's real needs were segmentation, SD-WAN path control, and visibility. Those needs were still there after the MX304 landed in the rack. I had bought a very fast packet mover for what was ultimately a policy problem.
What most people don't realize is that buying a higher-end platform doesn't reduce the need for planning. It increases it. The MX304 purchase ran past the budget we should have spent, and we later redeployed it to a location that actually needed its capacity. The product was not the issue. My need to avoid the previous mistake was the issue.
After the third mistake, I created a pre-purchase checklist for our team. It is deliberately short. It has caught 14 potential misfires in the past 11 months.
There is something satisfying about catching a wrong recommendation before it becomes a purchase order. Every item on the checklist is about five minutes of reading. Five minutes of verification beats five days of correction.
I hear that response a lot. A checklist sounds like bureaucracy until the alternative is explaining to leadership why a $20,000 order needs to be redone. In my experience, the 35-minute pre-flight saves weeks of post-incident work. It also prevents the quiet budget leak nobody tracks: engineers rebuilding configurations, vendors rushing replacements, and users losing confidence in the network.
The objection assumes speed matters more than direction. But moving fast in the wrong direction is not speed. It's just expensive momentum.
I still read the Juniper SRX380 product page. I still compare the Juniper MX304 with other platforms when a project genuinely needs that class of router. The difference is that I do it after I understand the network, not before.
The same goes for anyone searching for the “best cordless phone.” Read the reviews, compare the features, shortlist the hardware — just do it after you have confirmed the network can actually support it. A product page is not a network, and no phone review will ever configure a voice VLAN for you.
Prevention is cheaper than correction. The best time to catch a mistake is before the purchase order goes out.