Little surprised no one asked yet (can’t find it).
But can we have multifactor auth on the local HW controller too?
Use case 1:
I like to log in to the app and see what going on at a local site, but my mobile IP keeps changing so no whitelisting is possible, and exposing 443 to the whole world with the possibility of cracking my password within a few days is not a warm feeling
Use case 2 :
When a customer has multiple sites and has reasons to not go for the cloud controller option. It is easier to connect these sites without whitelisting all sometimes changing IPs