A salesman, from some lame company or other, told me that the reason why a certain brand of firewall was popular was it was less difficult to understand than the alternatives.

Now, think about this: if your network people can’t understand a firewall, do you really want them running your network ? If they don’t understand the underlying protocols then should they be doing a job where the key skill is to understand the underlying protocols ?

The worst aspect of this is that the people who really understand the things are generally much younger, more keen, more intelligent and far more immature. Pity that.