>What's wrong with setting up your firewall in a test lab? I mean the
>entire DMZ,choke etc etc. You can then test it until you are happy
>before letting others have a go...
Oh I agree, now everyone out there whose organization *has* a dedicated
test lab for firewalls, please stand up (sit down Marcus 8*). The long-running
joke around here is that I do all testing at home because I have better
equipment there (well, I do have a TCP/IP & IPX system with both 10Base-2
and 10Base-T that son and friends overload with DOOM but no Cisco. Yet.)