When to activate: network security, firewall rules, VPC security groups, NACLs, WAF, DDoS protection, VPN, network segmentation, zero trust network