One of the fundamental functions of firewalls is access control. Because all access inherently entails risk, controlling access can help to control that risk and provide an opportunity to evaluate the risk against business needs. Firewall rule complexity, however, reduces the benefit of access control by limiting visibility into the access you have granted, eroding your ability to assess the business justification for that access, and increasing the cost associated with security management.