Everything he said applies to a typical legacy corporate network that has a centralised default-deny firewall on front of it (but no NAT). Host-based firewalls

Everything he said applies to a typical legacy corporate network that has a centralised default-deny firewall on front of it (but no NAT). Host-based firewalls are much more flexible and have many security advanteges.