Devices in an internal network maybe protected, but they are never as protected as they are from requests coming from the internet.