Until the attacker bypasses your perimeter firewall by convincing an employee to download and install malware.

Having employees (or system like bastion hosts) with unrestricted access is one of the recurring mistakes in such events. I can’t understand it.