I am sorry to refute some users here. My personal experience as a PC/LAN analyst : I did work form many big companies and they have or had only one firewall except when having many different buildings in many sites, even so - They have ONE firewall per site. If you know hot to administer your firewall well, you only need one.