Do you route your internal traffic through your firewall rules and policies?If not, you are assuming a LOT of things about a LOT of things :)