Once again the weakest link in the trail is the human behind the computer, the firewall might detect some viriis/.... but it's got to be the person behind the screen to execute the file....