Security can fail before a firewall gets involved. A damaged patch lead can...

https://felixssuperperspective.brightsora.com/posts/is-cat6a-worth-it-for-10gb-s-over-100-metres

Security can fail before a firewall gets involved. A damaged patch lead can stop VPN handshakes; default switch credentials can help intruders move across an office