My company is currently updating its firewall policies (full disclosure: This hasn't been done in a while) and we're hung up on how often we should test the security of our firewall. Do you have any recommendations on how often firewall testing should occur?