We stopped doing perimeter assessments that cover more than the perimeter some years ago.  We now scan internal hosts from internal scanners and only use external scanners for the actual perimeter.  This way we found that we get more accurate results as well as fewer issues.  Perhaps you might be able to suggest that approach to the auditing firm (majoring on the improved accuracy element).  ... View more