Security policies Use a Policy Language Describe the security policy globally, at the network level Not related to devices, but related to business needs Stored in distributed security repositories Usual database Easily human readable file Plain text or XML Enable export & import with others applications Enable scripting