...from 2006 pointed me to an excellent paper "Security without firewalls: Sensible or silly?" about the San Diego SupercomputerCenter's “no firewall” approach. It’s a very interesting case study for any security architect. And their track...
http://www.computerweekly.com/blogs/david_lacey/security-solutions/