where user’s traffic (internal) is scrutinized based on certain policies