Any clue if Network Shield is both inbound/outbound protection or inbound only?