Best Practice - Combining Firewalls & Testing