Firewalls and VPNs are exposing organizations to breaches. It may seem counterintuitive due to the fact that the two have been go-to security tools for decades—but therein lies the problem. They were designed for a time when work was done much differently than it is today. In the era of yesterday, users and apps resided on premises (whether at the main office or a branch site), and security efforts focused on establishing a perimeter around the network that connected them. In other words, a hub-and-spoke network was defended by a castle-and-moat security model.30
