Virtual domains used to run separate inspection policy per internet path — commodity internet and the research and education network handled independently — inline at the core, with monitoring and probe segments designed in from the start rather than retrofitted once an incident demanded them.
Outcome
Commodity internet and the research network inspected independently, inline at the core rather than out of band.