More than half of corporate firewalls are a 'mess', and audit-dodging also common