A Firewall is often the first line of defense for many organisations, therefore these should have extensive lock down rules to ensure an attacker will be unable to access areas of the network that do not require external access or should perhaps be locked down within the core of a system.