# tag: Networking
- ▸ firewall-rules-nobody-can-explain.md · 17 sep 2026
Don't migrate a firewall rule nobody can explain
FireMon's June 2026 analysis of 9.2 million firewall policy checks found 69% of rules unused and 45% with no owner or documentation. Migrations usually copy that kind of ruleset into the new landing zone, because a copied rule breaks nothing on cutover night. Rebuild it from sixty days of VNet flow logs instead, and give a flow a rule only when somebody can say what it is for.
read → - ▸ virtual-wan-vs-hub-and-spoke.md · 25 jul 2026
Virtual WAN vs hub-and-spoke: a cost-of-management decision
Virtual WAN gets picked because it sounds like the grown-up option. Here's the actual trade against hub-and-spoke, and how to decide it on arithmetic rather than instinct.
read →