> I always recommend running everything with public IP address. No more excuses. It's public, so security is a must. Fully agree but depending on the culture o

> I always recommend running everything with public IP address. No more excuses. It's public, so security is a must. Fully agree but depending on the culture of the company, you'll be treat as fool is you make such a claim. One of my clients is a Fortune 500, VPN access is done without 2FA, you will find all sort of company credentials available from a github search. Was surprised to see one of those credentials belong to a Thales contractor working in the security field ... Security is a good as the weakest link, you can't win against people madness.