Cisco firewall 0-days under attack for 5 months by resourceful nation-state hackers

Perimeter devices ought to prevent network hacks. Why are so many devices allowing attacks?