- Plenty of services that can&#x27;t adequately be secured any other way are often mitigated by restricting access to VPN users coming in over a network device. I appreciate that &quot;just secure the service&quot; is supposed to be the best practice, but when you&#x27;re talking about things like IPMI interfaces or SCADA devices the alternatives approache zero<p>- Controlling the networking equipment can open you up to things like sslstrip