Sandy Flynn, vice president of marketing with eBryIT (, says:

A firewall is only as good as its configuration
A firewall is only as good as how it’s configured to behave. You can have a high-dollar and high-powered firewall device in your communications rack, but you might still be vulnerable to threats because the firewall is not configured with a well-designed set of rules to protect everything that is subject to internet traffic. A good firewall appliance has a well-designed interface that makes sense. And for that cryptic command line device, better make sure you have the right expert manning the keyboard.