Watch this video on YouTube
An information security manager reviewing firewall rules will be MOST concerned if the firewall allows: