> But all of this assumes whomever is already in the VPN to even find the targeted endpoint. From a security perspective you have to assume that. Defense in de

> But all of this assumes whomever is already in the VPN to even find the targeted endpoint. From a security perspective you have to assume that. Defense in depth requires closing all the little holes, because attackers will break in, and they will exploit your weaknesses. Assuming otherwise is just blind optimism or a vote of no-confidence in your company's prospects.