Now, stipulated, your wifi in a corporate network shouldn't *be* inside your firewall; users should be required to VPN in to your corpnet even if it's your own wifi they're on... but most people still don't do it that way.