A hardware interface arranged for enabling Direct Access when installed in a host endpoint in an enterprise network, comprising: an IPv4 to IPv6 translation component for providing IPv4 to IPv6 translation for data traffic that is incoming to the hardware interface; an enterprise security assessment sharing component arranged for implementing a security assessment publish and subscribe model in hardware for sharing security assessments among security endpoints, wherein the security assessments are arranged to provide contextual meaning to a security incident that occurs within an enterprise network environment, and wherein the security endpoints are enabled with functionality to publish security assessments onto a security assessment channel which is provided to enable the security assessment to be shared among the security endpoints; wherein the hardware interface is implemented as a network interface card and further comprises an IPsec component arranged for terminating an IPsec connection; wherein the enterprise security assessment sharing component is further arranged for receiving security assessments about security incidents detected by the security endpoints (605 2, 605 1) and for triggering a local response at a security endpoint to a received security assessment based on evidence (825, 828) combined or correlated from security assessments received from other security endpoints or internally generated by the security endpoint; and wherein a security assessment is a semantic abstraction that enables sharing of security-related information between different security products called security endpoints in the enterprise network environment. an IPv4 to IPv6 translation component for providing IPv4 to IPv6 translation for data traffic that is incoming to the hardware interface; an enterprise security assessment sharing component arranged for implementing a security assessment publish and subscribe model in hardware for sharing security assessments among security endpoints, wherein the security assessments are arranged to provide contextual meaning to a security incident that occurs within an enterprise network environment, and wherein the security endpoints are enabled with functionality to publish security assessments onto a security assessment channel which is provided to enable the security assessment to be shared among the security endpoints; wherein the hardware interface is implemented as a network interface card and further comprises an IPsec component arranged for terminating an IPsec connection; wherein the enterprise security assessment sharing component is further arranged for receiving security assessments about security incidents detected by the security endpoints (605 2, 605 1) and for triggering a local response at a security endpoint to a received security assessment based on evidence (825, 828) combined or correlated from security assessments received from other security endpoints or internally generated by the security endpoint; and wherein a security assessment is a semantic abstraction that enables sharing of security-related information between different security products called security endpoints in the enterprise network environment.