> I know it a little old fashion, as explained to me by a customer earlier this year. It is only outdated by proponents of cloud services since IP based filter

> I know it a little old fashion, as explained to me by a customer earlier this year. It is only outdated by proponents of cloud services since IP based filters are difficult to implement and/or require high maintenance. Otherwise sensible network segmentation and access rules are pretty much one of the best security mechanisms you can implement, far beyond the usual theatre some security products want to sell.