If data filtering is configured on the firewall but is not correctly referenced in the security policy, the data that should be blocked can still be transmitted...