iptables on the face is easy to use. But at scale becomes difficult to use. Also iptables does much more than just firewalls and can become a confusing tool.

iptables on the face is easy to use. But at scale becomes difficult to use. Also iptables does much more than just firewalls and can become a confusing tool. Also, in a large enterprise organization the firewall guy is different than the software engineering team which is different than architect.