pirrrrrrrr, 9 months ago

We only have to use it when connecting from off-site.

Best way is to VPN in (requires MFA) then everything via VPN.

Some admin stuff has more strict checks, but the staff access is use the office network or use MFA.