[sokoloff]

I'd recommend against the latter in any medium or large organization (and small as well, but sometimes one needs to make trade offs).

That's putting too much trust in the network. You don't want one phished internal user to expose the entire set of services that developers all think of as "on a trusted network".