It is often about keeping employees 'in'; logging where they go, restricting what services they use, etc. Not every wall is to keep people out. Many places I have seen put far more effort into keeping the employees 'in-line' then blocking outside threats.