For VPN and IPsec connections, I have local-in polices for trusted hosts
and VIPs in policies filtering out unwanted ASNs and non-united states
IP addresses from connecting to our listening ports. Blocked ASNs are
provided via feeds and other are IP ...
