Each partition is logically isolated from the others, and must provide the same services that are available
in a traditional dedicated enterprise network. The end user experience should be as if connected to a
dedicated network providing privacy, security, an independent set of policies, service level, and even
routing decisions. At the same time, the network administrator can easily create and modify virtual work
environments for various user groups, and adapt to changing business requirements adequately. The
latter is possible because of the ability to create security zones that are governed by policies enforced
centrally; these policies usually control (or...