c)Encrypted Communication Management

Policy-based Separation
okay
it manages the security policy of a node
but
contents-based filtering (e.g. IDS) is impossible in the middle ...
such function need be implemented on a node
Other Separation
impossible
encrypted communication is used to prevent forging and man-in-the-middle attack.