Much of the value provided by additional firewalls can be achieved with less complexity by using virtual private networks or placing all the components on the same subnet.

• 通过使用虚拟专用网络或者把所有的组件放在相同的子网上,也能实现附加防火墙所提供的很多功能而且降低了复杂性。