Article 34 of the Cyber Security ByLaw states that unapproved or vulnerable services should be blocked at the gateway firewall. However, there is no further clarification on what constitutes unapproved and vulnerable services. 