[kylemaxwell]

It actually serves two different purposes: prevents information leakage from the remote (secure) networks to the local node, and prevents possible malware stored on that local node from migrating into the remote network.