Cisco next gen firewall w threat defense vs just endpoint protection

Hi everyone,
I am looking at moving a small NGO forward with better security to get them on track towards HIPAA compliance.
Its a really small getup-- 4 workstations, a couple tablets, a few cell-phones, an All-in-one printer. No servers or VOIP at the moment, eventually some commercial grade scanners and a document server (but these two are a big maybe).

I'm wondering how worth it getting a cisco 5506-x with threat defense would be. We are going to go with BitDefender Business security for endpoint.

What would be the major pros of buying/implementing a cisco next gen firewall, in your opinion? cons?
the price is relatively low for the unit--- 5506-x device and 3yr threat defense license about 400$ through techsoup.