Two reasons why "old" network security doesn't work anymore: 1) They don't factor complexity vs capability. 2) They overlook areas of vulnerability