Its great and much informative. We do have the same issue. we cannot trust any traffic, so, trusting based on details such as src, dest, port, will help?   SMB/netbios/smtp, sometimes, being highest contributors, and inspections are mandatory. or sug...

This one is hundred percentage correct and worked for all aspects.