To say that keeping on top of your OS updates is a pain is to vastly understate the nature of the problem. If you're responsible for an enterprise with even a few dozen servers, plus a few appliances, some routers and switches, and a firewall or two, you have a huge management problem. Applying all of the necessary patches -- assuming you can figure out which patches you need and which are actually available -- can tax your staff to the breaking point. Worse, with larger enterprises, the problems mushroom.
Stories by Wayne Rash and P.J. Connolly
The hardware firewall that stands between the enterprise and the savaging hordes on the Internet fulfills an obvious need. But companies also need internal firewalls, both to protect against the accidentally induced virus or worm and against the depredations of rogue, disgruntled, or just plain crooked employees.