You mean they didn’t just turn off the firewall on all client machines and rely entirely on a single firewall at the network gateway? Because that’s what I’ve seen way too much of…