I asked a question about a specific feature (CIDR-Binding) of a security tool.
It was a specific question with a specific answer about a security tool, which I was able to answer later by diving into the source code a bit.
The mods voted to close that question as off-topic.
I don't think it was closed because it had significant issues which did not make it fit for the StackExchange format.
The only mod who commented said that it was closed, "Because you are asking about a specific function of a commercial product, I think it is better asked of the vendor."
I won't link to the specific question, to avoid the "meta effect".
But I would like to know, what is the standard for which security tools we're allowed to ask about?
Are we allowed to ask about commercial security products?
If not, does that exclude tools like RedHat Security Groups, or Azure Standard LB outbound rulesets, since these are part of commercial products?
If you have an answer to this, please include examples of what you think allowed tools would be, and what you think disallowed tools would be.
Relevant other meta questions:
Can people please be a little less zealous with close votes? (I don't think we necessarily have to "Be MOAR NICE" or anything, but we should at least have some semblance of consistency)
Lets allow tool recommendations in specific circumstances (Not specifically related, but has some good context about what and what not to ask about security tools)