It’s really not difficult at all if you have a multi-layer firewall (should be standard imo).

Fortinet nails this, took me a day to figure out.