> What they asked us to explain to them today is exactly how they are vulnerable
> to penetration from the Internet,
I don't think they are.
> why they need a firewall,
They have one.
> and exactly how
> that firewall will enhance their network security....
I can't see how it could, if they've got a single application bastion host
already in place.
Well... in a way...
If you have people inside who want to do more than email on the net, putting
a firewall in will discourage them from poking new connections through via
modems and things.