Part 3 ended on a deliberately uncomfortable note: a compliance policy by itself doesn’t block anything. It grades a device and moves on. This post is the other half of that pairing — Conditional Access is the piece that actually turns “this device is noncompliant” into “this device doesn’t get in.” ...
Part 1 traced the firewall from stateless packet filters through NGFWs — four generations, each one built to close the previous generation’s blind spot. This part covers what happened once there was no longer a single perimeter to defend at all. ...
If you run self-hosted services at home, you’ve probably hit the remote access problem at some point. You want to reach something — a dashboard, a tool, an API — from outside your home network. The path of least resistance is to open a port on your router and point it at the service. It works. It also quietly puts that service on the internet, discoverable by anyone running a scanner. ...