Security audit of a corporate website (penetration test of external interfaces and review of firewall rulesets and system configurations)