Hi BlakeRichardson, I agree with you, but layer 2 has no real meaning when people work from everywhere (home, train, coffeeshop, hotel, girlfriend) in a multicloud environment. And layer 3, what kind of traffic will be allowed (protocol, IP address, port) from what source IP to what destination IP, does not tell me anything about who the actual person is that is generating this traffic. In an era where (mobile) providers use carrier grade NAT and where both source and destination IP addresses in general are subject to change everyday I am not really interested in IP addresses anymore as a security mechanism. I want to know who that person is. ... View more