Thanks Joel for your informative blog. I understand the described methods of automating the whitelisted endpoints. I'd like to learn more about the "dashboard"(flow chart maybe?) that tracks these policy change actions (and reasons for actions) so that humans can understand and troubleshoot the policies that turn on (and I presume off when not needed). I would not want to be the guy that has to scan the log files to get to the bottom of a connectivity problem when robots control the spigots on data.