PF Randomness
Solutions

Fine-grained application
Proxies
Persistence
Firewall redundancy