Firewall, Penetration testing and User access levels