That changed on July 26. Moreover, most of the attacks demonstrated could be modified and used against almost any firewall product currently available. The demonstration touched on a wide range of vulnerabilities. Most firewalls are remotely administered and use cryptographic techniques to identify those who hold authorized access. So, a small error in an authentication protocol may be enough to allow an attacker to impersonate an administrator.
Firewalls have a limited ability to examine incoming traffic.
An attack may be split up among several different data packets, for example, or an improperly implemented virtual private network may prevent the firewall from looking at key data. If your firewall doesn't support strong authentication, get a new firewall. If that isn't possible, consider disabling remote ad ministration, whether it's a hassle or not. If your firewall doesn't have an antispoofing mechanism, get a new firewall. Have your firewall enforce the most restrictive access rules your organization can handle.