The aim of firewalls and similar systems is to prevent attacks that are actually taking place. They therefore often intervene after the attack has already happended. In contrast, vulerability management looks at the IT infrastucture from an attacker’s point of view. Here, the goal is to close vulerabilities that could be exploited by potential attackers so that an attack does not occur in the first place. A combination of both solutions is the best choice.