Most firewalls are put into place with rules added to them and rules are typically not removed. You should really audit your firewall yearly to ensure that you only have the rules in place you need and also to remove old rules. It is also a good time to compare your firewall rule set against your written policy. Remember to audit your firewalls at least yearly and if you need help, feel free to contact TBJ.