Every Production host is protected by a firewall with a deny-by-default rule. Deny by default rule set is a default on the Entity’s cloud provider.