comcast/xfinity has been doing this for years, its called security edge