Limitation of a firewall

difficult to cover every security threats only at the network border
insider attack due to a virus infection
unexpected communication through wireless-LAN, mobile-phone...

obstacle for the deployment of IPv6
negating the benefit of IPv6 (E2E communication, IPsec...)

Inevitable due to the nature of a firewall
'defence at the network border of a site'