The firewall project really started the morning of the ransomware incident, when one of the paths the threat actor used to move around the network turned out to be a legacy VPN appliance that nobody had been watching closely. Replacing the perimeter was already on the roadmap. After the incident it became the roadmap.