posted by EvIl eLf
A good firewall is only as good as its admin and ability to recognize attack signatures and react to them ,oh yeah bleeding network traffic to the internet would be good as well
firewall is as solid as the rules setup by its admin. balancing the vulnerability of the firewall and its ease of use, like setting up complex rules, is important. also find out other users comments on the tech support provided by the vendor.

rgds
de