An exploited authentication flaw in SonicOS shows why turning on MFA is not the same as enforcing it on every route
