> should be dropping all inbound requests But then they never would've been able to detect the ransomware! How can we make sure our systems are secure if we ca

> should be dropping all inbound requests But then they never would've been able to detect the ransomware! How can we make sure our systems are secure if we can't audit them, and how can we audit our systems if we can't SSH in, and how can we meaningfully SSH in if we can only do it from the office and not from employee computers at home? /sarcasm