TL;DR: A business firewall should have its firmware and rule sets reviewed at least quarterly, with critical security patches applied as soon as they're released. Full policy audits should happen annually, or immediately after major network changes, mergers, or security incidents. Smaller businesses can stretch full reviews to twice a year, while regulated industries often require quarterly or monthly checks. A firewall is often the first...