Tier-1 gateway: Network introspection services can be configured at the Tier-1 gateway level to inspect and control East-West traffic between workloads.
Partner SVM (Service Virtual Machine): Network introspection is often implemented through integration with a Partner SVM, which is a virtual machine provided by a third-party security partner to perform deep packet inspection and other security functions.