Step 1: assume every service listening on your network has an auth exploit that has not been found. Step 2: deploy this. Step 3: ... Step 4: profit! The lin

Step 1: assume every service listening on your network has an auth exploit that has not been found. Step 2: deploy this. Step 3: ... Step 4: profit! The line between something like this and a locking the service behind a VPN is very narrow. They both achieve the same thing, protect high risk/value targets by not even allowing unauthorized people to talk to them at the network level.