3 ms·

Good reason why defense in depth should be used. Simply stating that your network configuration prevents access isn't the best answer.

• wang_li 7y ago
  >Simply stating that your network configuration prevents access isn't the best answer. Right. The network should actually be configured to prevent access.
  • CydeWeys 7y ago
    And, in the event that this configuration fails to do what you expect it to you, or your network is breached via other means, you should be utilizing defense and depth and all of your DBs and other sensitive systems should require authentication.
    • riknos314 7y ago
      This. This is why google assumes that the network layer adds no security. https://cloud.google.com/beyondcorp/ https://cloud.google.com/beyondcorp/