1. A method of operating a communication network, comprising: logically dividing the communication network into a plurality of zones; specifying policies that define allowable communications between elements in different ones of the plurality of zones; and blocking communications between elements in different ones of the plurality of zones that violate at least one of the policies.