Feeling fairly confident, our networking team decided to have a security audit. We thought we were pretty secure..... We were wrong. This Presentation will explain what is was like to be audited by pentesters, why it was worth doing, lessons we learned, and why we want to do it again.