This is exactly what firewalls are for. Your "layer" of defense is the defense. If you want another layer, then set up another firewall further along the network.