Firewall changes queue for days, get implemented by hand, and accumulate into rulebases nobody fully understands. Every change risks either an outage or a hole.
"Every firewall change is a trade-off between blocking the business and opening a hole — and we're making that call by hand, hundreds of times a month."
Change turnaround time
Policy inconsistencies
To first automated policy flow