A few weeks ago, I was asked by a GRC consultant a simple question: Is our East-West traffic truly controlled—or are we just assuming it is? On paper, everything looked correct. ACI was enforcing policy, PBR was redirecting traffic to the firewall, and FortiGate VDOMs were segmenting environments. But I wanted proof—not assumptions. So I… Read.