Draw the Perimeter

A site team takes IPsec off every link because “the site is secured”. Predict what the audit will say, then draw the perimeter and choose the tunnels for three briefs, and read the four-column audit the model works out for each.