We block all traffic that isn’t from NA and Europe in our company (for our hosted applications). We don’t have users outside that so have no reason to accept connections.

It’s just part of our general security strategy

Yes, although they’re usually pretty cheap and nasty.

I was given a Dasan unit which is pretty grim, but works