Protecting access beyond the perimeter