A common data acquisition infrastructure to monitor WAN to LAN, Physical to Virtual, OOB to In-line.
Deliver only "packets of interest" for each security device by sophisticated filtering.
Detect, trace and block Internet connection in the frontline according to a massive blacklist of IP and domains