Simson Garfinkel reports on why firewalls aren’t “good enough”.
That‚s a problem, because firewalls often provide a mere illusion of protection. They don‚t make business systems significantly more secure. And by focusing attention on defending the perimeter, rather than on defending information assets within an organization, firewalls foster lax internal security practices that magnify the damage that insiders can inflict.
What firewalls do accomplish, however, is this: they make the Internet more cumbersome to use.