“every internal-facing SOA-based deployment should always be configured as if it were outward-facing” Amen. That’s why the Web/REST should be the starting point for SOA.
(link) [del.icio.us/distobj]