A system for analyzing and controlling network traffic associated with at least one device that resides between a first network and a second network, said system comprising: a memory that stores machine-executable components (201, 202, 203), a processor that is operatively coupled to the memory, and is configured to execute the machine-executable components (201, 202, 203), wherein the machine-executable components (201, 202, 203) comprise a policy definition authority component and a network traffic analyze-control-component (202, 203), wherein the policy definition authority component is configured to - provide, to the network traffic analyze-control-component (202, 203), at least one first data analytics model and at least one second data analytics model, the network traffic analyze-control-component (202, 203) is configured to - receive an input data comprising a network traffic data and a network traffic context data representative of a context within which the network traffic occurs, - apply the at least one first data analytics model to the input data, wherein the at least one first data analytics model performs a context-based identification of at least one network traffic situation, - apply the at least one second data analytics model to the at least one network traffic situation, wherein the at least one second data analytics model generates at least one rule according to which the network traffic can be controlled, - control the network traffic according to the at least one rule. a memory that stores machine-executable components (201, 202, 203), a processor that is operatively coupled to the memory, and is configured to execute the machine-executable components (201, 202, 203), wherein the machine-executable components (201, 202, 203) comprise a policy definition authority component and a network traffic analyze-control-component (202, 203), wherein the policy definition authority component is configured to - provide, to the network traffic analyze-control-component (202, 203), at least one first data analytics model and at least one second data analytics model, - provide, to the network traffic analyze-control-component (202, 203), at least one first data analytics model and at least one second data analytics model, the network traffic analyze-control-component (202, 203) is configured to - receive an input data comprising a network traffic data and a network traffic context data representative of a context within which the network traffic occurs, - apply the at least one first data analytics model to the input data, wherein the at least one first data analytics model performs a context-based identification of at least one network traffic situation, - apply the at least one second data analytics model to the at least one network traffic situation, wherein the at least one second data analytics model generates at least one rule according to which the network traffic can be controlled, - control the network traffic according to the at least one rule. - receive an input data comprising a network traffic data and a network traffic context data representative of a context within which the network traffic occurs, - apply the at least one first data analytics model to the input data, wherein the at least one first data analytics model performs a context-based identification of at least one network traffic situation, - apply the at least one second data analytics model to the at least one network traffic situation, wherein the at least one second data analytics model generates at least one rule according to which the network traffic can be controlled, - control the network traffic according to the at least one rule.