rastructure include overload controls and diversion capabili- ties. Overload controls (which also help in the case of network problems) prioritize functionality SO that resources are best applied to control plane and high priority traffic. Diversion is the ability, typically using specific portions of the IP header to identify candidate network traffic, to redirect packets for subsequent processing, rate limiting, and when necessary, elimination. Forensics is fundamental to security. The ability to log activity provides the ability to analyze past incidents to determine root cause and to develop prevention and mitigation solutions. It also plays a role in active security enforcement by acting as an additional point of behavior inspection, which may indicate either the failure or a weakness in the security design or implementation. Within security processes, two key components are automation and identity management. Automation allows for the administration of complex sequences and eliminates the human element from configuration that is a typical source of security problems. All it takes is entering the wrong IP address in an ACL to create a vulnerability. Identity management ensures that both people and software are authorized to view, create, delete, or change records or settings. The Network Cloud uses a centralized approach for identity verification. This prevents another weakness of local pass- words, which are more easily compromised. These topics are discussed in more detail in Chapter 9. 2.5.6 ENTERPRISE CUSTOMER PREMISES EQUIPMENT Enterprise networks are the environment that businesses use to tie together their people, IT, and operating infrastructures. From offices, warehouses, factories, and on-the-go people in trucks, cars, and while visiting their customers, enterprises need comprehensive solutions for communications. Typically, they use a range of voice, video, data, and mobile services. All of their operating loca- tions need some form of on-premises equipment, called customer premises equipment (CPE