When Protection Becomes a Firewall