Techniques for system wide analysis of industrial protocol traffic are provided to determine an optimal location of a security device and/or to dynamically and automatically create rules for security devices, communication modules, and/or proxy devices, including replacement devices. Intrusion detection...http://www.google.de/patents/US7966659?utm_source=gb-gplus-sharePatent US7966659 - Distributed learn mode for configuring a firewall, security authority, intrusion detection/prevention devices, and the like