See https://news.ycombinator.com/item?id=10821781 for the typical vendor equipment feature set implementing this kind of feature. I find individual user profiling as shown in screen captures towards the end of the document more concerning...