To be fair, there's a lot of outdated hardware and software running behind the scenes right now where the mitigation is precisely to "firewall" it, but I feel l

To be fair, there's a lot of outdated hardware and software running behind the scenes right now where the mitigation is precisely to "firewall" it, but I feel like the sense in which that's used colloquially by people who do this for a living and the way that word is used by this guy are miles apart. In very broad terms the idea should be to profile what the outdated thing is actually needed for and restrict all possible requests to this narrow allowlist and put it behind a gateway that handles the actual connections from the rest of the network and rewrites the requests it forwards. This guy is talking about arbitrary usage by a human which is far more risky and all he thinks is needed is to block off some unused ports and protocols.