Even firewalls in the enterprise corporate environment have the same problem. Network architects (well the bad ones anyway) know what they need to do to the fir

Even firewalls in the enterprise corporate environment have the same problem. Network architects (well the bad ones anyway) know what they need to do to the firewall to achieve connectivity but dont know what security side effects those changes have thus rendering the firewall put in place to have no effect at all. This equates to 1000's upon 1000's of dollars spent simply to be rendered useless by silly decisions. I guess having said this the fault is more heavily placed on the user and not the equipment in this case. I think if you look at the plight of anti-sec the equipment and the software is as much to blame as the user controlling them in many of the cases