> that assumes that things inside these walls are also not secured, which is often not the case I've operated under the old castle doctrine for many years. It

> that assumes that things inside these walls are also not secured, which is often not the case I've operated under the old castle doctrine for many years. It is my experience that in the vast majority of places, once the wall of VPN / packet filtering has gone up, people suddenly relax and forget about internal patches. There are exceptions, but they are uncommon.