Entity requires that all endpoints with access to the environment housing the in-scope data are protected by a Firewall