SOAP is said to be firewall-friendly... This news by itself however is not setting the corporate gates wide-open for this new technology.
Interesting moves towards solving the remaining issues are to be found in the recent announcement of a v1.0.0 of the XML Apache Security project which implements the related specification work of W3C for signing and encrypting parts of an XML tree.