Firewall policy and sites into Cato, one decision at a time.