An IS auditor discovered that a firewall has more services than needed.