I was working for AVG, going into networks and finding a "backdoor" so as to show the company that their firewall is not as secure as the external AVG product. Be it law company to high end offices,it is not easy as it was setup by other computer engineers.
After Note:To make things blunt external firewall is the same as software.