The firewalls are inspected to find any abnormal communications, and the cause of any such communications is identified and dealt with appropriately.
(inspection points: traffic volume, day of the week/time zone, abnormal/unauthorized access destination