In some cases, if home users are set up with a (Virtual Private Network) VPN which is set to force all internet traffic to route via the VPN to your office network and they are suitably trained, this may be accepted as a “compensating control” which would reduce the need for users to check their home router firewall settings. However, it is up to you to prove to our satisfaction that your setup offers an equivalent level of protection and that this protection will continue to exist going forward.