Security can fail before a firewall gets involved. A damaged patch lead can...

https://telegra.ph/How-to-Plan-Cabling-for-the-Next-Refresh-Cycle-WiFi-7-and-PoE-10-15

Security can fail before a firewall gets involved. A damaged patch lead can stop VPN handshakes; default switch credentials can help intruders move across an office