I haven't seen firewalls on the edge in ages. I guess it's more of a Fortune 500 attitude than tech company thing. "Firewall" devices still have a place inside

I haven't seen firewalls on the edge in ages. I guess it's more of a Fortune 500 attitude than tech company thing. "Firewall" devices still have a place inside your network beyond the perimeter. Today they do ACL enforcement as well as DPI, IDP, IDS, tap data, etc. It's not unheard of to run a "firewall" in completely passive, monitor-only mode to generate telemetry data.