1. A method for use with a plurality of processing platforms that are each at least potentially in-line with respect to a flow of data packets, the method comprising: receiving an installation of a data packet filter that includes a first rule and a second rule, wherein the first rule is to be effected before the second rule; and automatically selecting where, from amongst the plurality of processing platforms, to effect the data packet filter by: automatically selecting where, from amongst two or more of the plurality of processing platforms that are capable to effect the first rule, to effect the first rule; and automatically selecting where, from amongst two or more of the plurality of processing platforms that are capable to effect the second rule, to effect the second rule; such that the first and second rules may be effected by separate respective first and second processing platforms, the first processing platform being upstream of the second processing platform in the flow of data packets.