I just stated that you cannot depend on one device prevent all attacks. As an anaylst, you need to make sure that you are secure from top to bottom. This includes strong firewall rules, strong IPS rules, anti virus and 802.1x.