Security review of single or clustered firewall systems
Evaluate firewall rulebase for potential methods of attack
Review change approval process for new firewall rules
Document firewall management procedures, backup, patching, failover, etc.
Evaluation of staff charged with management of the firewall systems