@pete-s said in Is XYZ considered secure?:

But if compliance is required, don't you have to abide and make decision based on both real security as well as compliance?

Nothing makes you abide by good security other than the risk of being sued over it. So no, you don't have to abide by both. Is it best to, sure of course, if you value you company.

A proper DMZ is still a valid concept, but was never that big of a deal. There are almost no resources that make sense to put there. If you have those resources, then sure. But who does? The advent of cloud computing, cheaper colocation, better IT knowledge, etc. has led most shops to not try to make "internal/external" shared resources where one side is public and the other uses LAN security; and what little of that remains in need is generally addressed with VLANs in a slightly different way.

@JaredBusch said:

@Dashrender said:

An example might be, the inflight WiFi services normally don't allow you to stream Netflix. If you use a VPN that supports Netflix you can bypass the filters the airline put in place and still stream Netflix.

Like the OpenVPN I have set on my Ubiquiti EdgeMax router at the house. So my daughters can watch Netflix while in Japan 😉

LOL