For the encrypted protocols, we offer both server-side and mutual authentication. Beyond that, we also offer iptables for these public-facing listeners to ensure only specific locations can initiate connections. From the Secure Gateway Client, there is also an Access Control List that determines what the client is allowed to connect to. This means that just because a resource has been defined and a public endpoint has been provided, no resource will be exposed until the Access Control List has been modified.