The firewalls had identical configurations in all targeted systems (enterprises).

The external firewall allowed all traffic to the DMZ and everything initated from within the enterprise.

The firewall between DMZ and INTERNAL allowed all traffic.

The firewall between INTERNAL and HMI allowed all traffic orginating from within the enterprise and everything initated from within the enterprise.