Firewalls and AV programs are completely ineffective against state-sponsored attacks because adversaries who are targeting high value data have multiple attack vectors to choose from that would be utterly invisible to automated defenses.
FORBES: Why The Pentagon's 'Cyber Shield' Concept Is Hopelessly Flawed