“We all know that IP whitelisting is not very secure and doesn’t scale well, especially within a multinational banking environment. We were also looking for a network security solution that is easy to maintain and set up, since it is an important part of our environment, but can also be time-consuming. Each team knows best what they want to allow because they know which backends they need to reach from their API. And that can often change because the backend or other things can move quickly. We don’t want to do IP whitelisting because even the backend IP can switch, especially if it’s in the cloud. You also don’t care what the IP is and IPs can be very error prone. Having FQDN is way easier to maintain because it says more than an IP address, allowing teams to just provide a list of names instead of IPs.”