network administrator displaying the second policy to the first network administrator and displaying the first policy to the second network administrator application_number US 201213590992 A description embodiments of the invention will be described with reference to the accompanying drawing figures wherein like numbers represent like elements throughout before embodiments of the invention are explained in detail it is to be understood that the invention is not limited in its application to the details of the examples set forth in the following description or illustrated in the figures the invention is capable of other embodiments and of being practiced or carried out in a variety of applications and in various ways also it is to be understood that the phraseology and terminology used herein is for the purpose of description and should not be regarded as limiting the use of u201c including u201d u201c comprising u201d or u201c having u201d and variations thereof herein are meant to encompass the items listed thereafter and equivalents thereof as well as additional items fig3 is a diagram of an example boundary interface element bie 300 in accordance with an aspect of the present invention the bie 300 is operative to enforce independent network security policy for each of a plurality of interfaces virtual or physical which are limited only by logical processing capacity or physical layout space the construct of the present invention allows an appropriate role of access enforcement for each interface of the bie 300 to be independently controlled as shown bie 300 is a hardware component having a plurality of interfaces 4 interfaces are shown for illustrative purposes interface 1 302 to a first network or element not shown interface 2 304 to a second network or element not shown interface 3 306.