I guess this forum is "dead"?
I will attempt to ping a Enterprise Moderator to assist you.
You are quite welcome, hopefully you will hear something in short order
I'm unsure why you're suggesting ENS Firewall is deployed by default. For instance I currently have only the ENS Platform and ENS Threat Prevention installed.
ENS and VSE are fairly on par currently, I imagine ENS will eventually replace it. Update 10.2 could swing the benefits ENS' way.