Administrators can use iMaster NCE-Campus to centrally manage service policies on network-wide policy enforcement points.

Administrators can define service policies based on security groups to decouple service policies from IP addresses.

Administrators need to configure service policies multiple times for each policy enforcement point through iMaster NCE-Campus, which then automatically delivers the policies to the corresponding policy enforcement points.

Policy enforcement points on a network can subscribe to IP-security group entries through iMaster NCE-Campus to obtain the mapping between users and IP addresses on the entire network.