It all started with a very simple question. Is it possible to firewall all internal traffic to help prevent or detect lateral movement?