Work from anywhere

When users are located behind the organization’s next generation firewall (NGFW) and reside on the local network, they are said to be on-net and are subject to the security policies and security features that are configured on the NGFW.

With the practice of working from anywhere, users are often located outside the organization’s NGFW and are said to be off-net. Off-net users are also typically unmanaged, that is, not managed by the organization’s IT team and typically access the Internet directly via the local ISP, which bypasses all security policies and security features.