To be frank, it is outright stupid of them to deploy a device to you without providing you with the proper training. You shouldn't be coming here for help, you should be telling them you require training before this gets properly implemented. If they are incapable of doing that, you should raise the issue with your superiors. The most secure firewall is one that can be properly maintained, they have done precisely the wrong thing here, but you can get them to fix it by allocating a certain amount to training.

The training the staff aspect of things must have been utterly ignored or just outright not considered.