Thinking outside the network security box